## Meta Ads integration

Integrating Meta Ads with Frontegg lets your application read and manage advertising on Facebook and Instagram through the [Meta Marketing API](https://developers.facebook.com/docs/marketing-api/). Once connected, the integration can list ad accounts, read campaigns, ad sets, ads, and performance insights, and create, update, or pause campaigns, ad sets, and ads. You configure the integration by creating a Meta for Developers app with the Marketing API use case, then providing the App ID, App secret, and Frontegg redirect URL.

Prerequisites
- A [Meta for Developers](https://developers.facebook.com/) account.
- A [Meta Business Portfolio](https://business.facebook.com/) to associate with the app (you can also create one during app creation).
- Access to at least one Meta ad account that the connected user manages.


### Create a Meta app

#### Step 1: Add app details

Sign in to the [Meta for Developers apps page](https://developers.facebook.com/apps/) and click **Create App**. On the **App details** step, enter an **App name** (for example, `Frontegg Ads Connector`) and confirm the **App contact email**. Meta uses this email for policy notifications, so set it to an address you check regularly. Click **Next**.

App name restrictions
Meta does not allow app names that contain reserved brand terms like `FB`, `Face`, `Book`, `Insta`, or `Gram`. Choose a neutral name (for example, `Frontegg Ads Connector`) instead.

![Meta app details step with the app name filled in](/assets/meta-ads-1.77a61e60254408c9f5038431b66164ea26e75ea3d2666321d952239f27930c86.1ce25488.png)

#### Step 2: Select the Marketing API use case

On the **Use cases** step, select **Create & manage ads with Marketing API**. This use case grants the `ads_read` and `ads_management` permissions and provisions the OAuth settings the integration needs. Click **Next**.

![Use cases step with Create & manage ads with Marketing API selected](/assets/meta-ads-2.86f280f1bd9cfc5619b8ea858852a6e75b22fe4b217b08e11e7550267bdb6a14.1ce25488.png)

#### Step 3: Connect a business portfolio

On the **Business** step, choose the Business Portfolio that will own this app, then click **Next**. You can connect an unverified portfolio now and complete business verification later when you move beyond the limited access tier.

![Business portfolio selection step](/assets/meta-ads-3.14e3a2125c08749ffb5ba7adc85ef99fa45df539cc14190dde6586ae01314397.1ce25488.png)

#### Step 4: Review and create the app

Click **Next** through the **Requirements** step, review the **Overview**, then click **Create app**. Meta may ask you to re-enter your Facebook password to confirm.

![Overview step with Create app highlighted](/assets/meta-ads-4.226ea609c7b28f1f885d9682f4f6479eabf7e773a04bc8655a1cff20b7fad18e.1ce25488.png)

### Copy the credentials

#### Step 5: Find the App ID and App secret

In the app dashboard, navigate to **App settings → Basic**. The top of the page shows the **App ID** and **App secret**. Copy the **App ID** — this is your Frontegg **Client ID**. Click **Show** next to **App secret**, re-enter your Facebook password when prompted, and copy the value — this is your Frontegg **Client Secret**.

![App settings Basic page with App ID and App secret](/assets/meta-ads-5.bfd6ab12b7766e000a79701425ecd3a9f3e5dfa3b7a6ab6106b7b3cb6453a475.1ce25488.png)

### Configure permissions

#### Step 6: Confirm the Marketing API permissions

Navigate to **Use cases → Customize** on the **Create & manage ads with Marketing API** tile, then open the **Permissions and features** tab. The Marketing API use case includes the permissions the integration uses — confirm that both `ads_read` and `ads_management` are listed.

The integration uses the following scopes:

| Scope | Description |
|  --- | --- |
| `ads_read` | Read ad accounts, campaigns, ad sets, ads, ad creatives, and performance insights. |
| `ads_management` | Create, update, pause, and delete campaigns, ad sets, and ads. |


Minimum required scopes
For read-only reporting, you need `ads_read`. To create or modify campaigns, ad sets, and ads, add `ads_management`.

Standard access requires App Review
Permissions are initially **Ready for testing** — they work only for users assigned to the app under **App roles → Roles** or **Test users**. To grant access to any Meta user, publish your app and submit it for [App Review](https://developers.facebook.com/docs/app-review/), requesting **Standard access** and the higher **Marketing API access tier**.

![Permissions and features tab with ads_read and ads_management](/assets/meta-ads-6.2be7ed9ecb9e0eca55d979b76a17029d9ab3e01a314be0afd639eeecc76eca71.1ce25488.png)

### Configure the redirect URL

#### Step 7: Add the Frontegg redirect URL

In the left menu, open **Facebook Login for Business → Settings**. Under **Client OAuth settings**, make sure **Client OAuth login**, **Web OAuth login**, and **Use Strict Mode for redirect URIs** are set to **Yes**. Scroll to **Valid OAuth Redirect URIs** and add your Frontegg redirect URL:

- `https://YOUR_MCP_GATEWAY_URL/integration-callback`


Replace `YOUR_MCP_GATEWAY_URL` with the MCP Gateway URL from the Frontegg portal **Settings → Basic configuration** page. Press `Enter` to add the URI as a chip, then click **Save changes**.

![Facebook Login for Business settings with the redirect URI added](/assets/meta-ads-7.2ea89325172344a4e0a57684a1d93aa2b66934deb9feffbb1696bd60d6b5d8a2.1ce25488.png)

### Verify the OAuth flow

#### Step 8: Preview the consent screen

Open the Meta OAuth dialog in a new tab to confirm that the redirect URL, App ID, and scopes are wired correctly:


```text
https://www.facebook.com/v24.0/dialog/oauth?client_id=YOUR_APP_ID&redirect_uri=https://YOUR_MCP_GATEWAY_URL/integration-callback&response_type=code&scope=ads_read,ads_management
```

If everything is configured correctly, Meta shows a consent screen titled "Continue as ..." that names your app — this is the screen the connected user sees when authorizing the integration. If the redirect URL is missing or mistyped, Meta shows a "URL Blocked" error instead.

![Meta OAuth consent screen for the Frontegg Ads Connector app](/assets/meta-ads-8.59990fedce3630c90a19c6bf2995be6d5beb299f42cb6834c2a9947c764c763f.1ce25488.png)

### Configure the Frontegg portal

Once you have your **App ID (Client ID)** and **App secret (Client Secret)**, enter them in the Frontegg portal:

1. Open the **Frontegg portal** and navigate to [ENVIRONMENT] → Integrations → Meta Ads.
2. Enter the **Client ID** and **Client Secret** in the corresponding fields.
3. Select the required **scopes**.
4. Click **Save**.


When a user authorizes the integration, Meta prompts them to log in and grant the requested permissions to your app.

Tokens expire after about 60 days
Meta does not issue refresh tokens for this flow. Access tokens are long-lived (about 60 days), after which the connection must be re-authorized.

Keep your credentials secure
Never share or commit your App secret to version control.

### Additional resources

- [Meta Marketing API documentation](https://developers.facebook.com/docs/marketing-api/)
- [Marketing API permissions reference](https://developers.facebook.com/docs/permissions/)
- [Meta App Review process](https://developers.facebook.com/docs/app-review/)
- [Meta for Developers apps page](https://developers.facebook.com/apps/)
- [How to get your Redirect URL](/agen-for-work/connectors/redirect-url)