At a glance
Capabilities
Connecting
auth_url. After they authorize, SocialAPI exchanges the code with Facebook and redirects the user to your redirect_uri with the connection result. See OAuth flows for the redirect parameters.
Reading samples
List posts
List comments on a post
List DMs
Publishing
Create a Facebook Page post with optional platform-specific fields:Limitations and gotchas
- Multi-Page OAuth: a single OAuth flow connects all Facebook Pages the user manages. Each Page gets its own
account_id. - Page tokens never expire: unlike Instagram, Facebook Page tokens derived from long-lived user tokens do not expire. No reconnection needed unless the user revokes access.
- Private replies: replying to a comment with
"private": truesends a one-time DM to the commenter. Can only be sent once per comment, within 7 days of the comment. - 24-hour messaging window: Pages can send any message within 24 hours of the user’s last message. After that, only approved message tags are allowed. If you get an error sending a DM, the window may have closed.
- Reviews deprecated: Facebook deprecated Page Recommendations/Reviews in Graph API v22.0 (January 2025). The API returns
501for review endpoints.
Permissions
SocialAPI’s managed Meta App already requests these scopes on your behalf:pages_show_list, pages_read_engagement, pages_read_user_content, pages_manage_engagement, pages_manage_metadata, pages_messaging, pages_manage_posts, public_profile, business_management. You don’t need to apply for any platform app review. See Platform credentials.