Set up your Meta App and System User token

1. Sign in at developers.facebook.com/apps and click »Create app«.
2. Pick a name (e.g. claude-meta-mcp) and a contact email. Skip the optional Business Portfolio assignment for now — we attach it in step 3.
3. After creation you land on the App dashboard.

In the App dashboard go to »Use cases → Add use case« and add these five cases — together they cover the full v0.4 toolset (47 tools):

• »Measure ad performance with Marketing API« → provides ads_read, business_management, read_insights
• »Create and manage ads with Marketing API« → provides ads_management, business_management
• »Manage everything on your Page« → provides pages_show_list, pages_manage_posts, pages_manage_metadata, pages_read_engagement
• »Manage messaging and content on Instagram« → provides instagram_basic, instagram_content_publish, instagram_manage_comments, instagram_manage_insights
• »Manage products with Catalog API« → provides catalog_management (for Product Catalog inspection: businesses, catalogs, feeds, products, diagnostics)

After selecting these use cases, the App's »Permissions and Features« tab will show every permission as »Standard Access (granted by default)« — for own assets you don't need to submit anything for App Review.

1. In the Meta Developer dashboard go to »App settings → Basic«.
2. Scroll to »Business Portfolio« at the bottom.
3. Pick your existing portfolio, or »Create new« if you don't have one yet.
4. Click »Save changes« at the bottom.

Verify in business.facebook.com → Settings → Accounts → Apps: your app should now appear in the list.

1. In business.facebook.com → Settings (bottom left) → Users → System Users.
2. »Add« → name e.g. claude-mcp → role: Admin (System Admin).
3. Click the new System User to open its details panel.

In the System User detail panel, click »Add Assets« for each:

• Tab Apps → check claude-meta-mcp → role »Develop app« or »Manage app«.
• Tab Ad Accounts → check your ad account, permissions: »Manage campaigns« + »View performance«.
• Tab Pages → check the Page, permissions: »Create content« + »Manage Page posts« + »View Page insights«.
• Tab Catalogs → check your Product Catalog (permission: »View catalog«). Only required if you want to use the v0.4 Product Catalog tools.

The Instagram Business account is reachable automatically via its connected Facebook Page — no separate assignment needed.

1. In the System User detail panel, tab »Tokens« → »Generate New Token«.
2. »Select App«: pick claude-meta-mcp — this binds the token to your App's signing keys.
3. »Token expiration«: choose »Never« — that's the whole point of a System User token.
4. Permissions: check all the scopes for the v0.4 toolset (full list below).
5. »Generate Token« → the token appears once. Click the Copy button — don't select-and-copy the displayed string, Meta obfuscates it visually until you click the button.

Full scope list for v0.4 (47 tools):

• ads_read, ads_management, business_management
• pages_show_list, pages_manage_posts, pages_manage_metadata, pages_read_engagement
• instagram_basic, instagram_content_publish, instagram_manage_comments, instagram_manage_insights
• catalog_management (for the v0.4 Product Catalog tools — catalogs, feeds, products, diagnostics)
• optional: read_insights

On developers.facebook.com/tools/debug/accesstoken/ paste the token. You should see:

• Type: System User
• App ID: your app's ID
• Expires: Never
• Scopes: the 12+ selected permissions

# am Server, NICHT durch Drittanbieter:
nano /var/www/connector/.env
# Zeile setzen:
META_ACCESS_TOKEN=EAA...

# Connector neuladen:
pm2 reload claude-meta-mcp --update-env
# oder
systemctl restart claude-meta-mcp

Quick confirmation:

TOKEN=$(grep ^META_ACCESS_TOKEN /var/www/connector/.env | cut -d= -f2-)

curl -s "https://graph.facebook.com/v22.0/me?access_token=$TOKEN" | jq
# → {"name":"<dein system user name>","id":"..."}

curl -s "https://graph.facebook.com/v22.0/me/adaccounts?fields=id,name&access_token=$TOKEN" | jq
# → Liste der zugewiesenen Ad Accounts

curl -s "https://graph.facebook.com/v22.0/me/accounts?fields=id,name&access_token=$TOKEN" | jq
# → Liste der zugewiesenen Pages