Permissions

What this skill does

The Permissions skill manages the OAuth scopes required for Instagram and Facebook API access, enabling specific marketing features like reading profiles, publishing content, managing comments, and accessing insights. It clarifies which scopes correspond to each action, how to configure them for development and production, and outlines the approval process needed for app review beyond test users. This skill ensures marketers can control and request only the necessary permissions to operate efficiently while complying with platform policies.

Who it's for

This skill is designed for performance marketers managing Instagram or Facebook campaigns who need to automate posting, community moderation, or analytics retrieval. It’s also useful for growth leads coordinating app integrations requiring scoped API access and agency strategists setting up social media tools for multiple clients under strict privacy and compliance guidelines. Anyone handling OAuth token permissions for social media automation and reporting workflows will benefit from understanding and applying this skill.

Key workflows

First, define the required scopes based on the features your project demands, such as `instagram_basic` for profile reads or `instagram_content_publish` for posting media. Next, configure the Meta App in development mode with up to five testers to test all scopes without approval. Once ready for production, prepare the app review submission by documenting use cases, recording screencasts, and justifying each requested permission to meet Meta’s criteria. Finally, adjust your OAuth scopes in configuration files, limiting them to the minimum necessary to reduce friction and privacy concerns.

Common questions

Can I use all scopes in development without approval? Yes, up to five testers can access all scopes in test mode. What happens if I need to publish content at scale? You must submit for app review with detailed justification for `instagram_content_publish`. Is it possible to reduce requested scopes after initial setup? Absolutely, scopes can be trimmed in your OAuth configuration to only what your app requires.

How to use in Metaflow

Attach the Permissions skill to any Metaflow agent task that involves authenticating with Instagram or Facebook APIs, specifying the exact scopes needed for the task’s features. Expect Metaflow to handle token management and scope validation in development and production environments, streamlining the app review process. For detailed setup and examples, consult the internal documentation on configuring OAuth permissions within Metaflow workflows.

For broader context, see our roundup of claude skills for marketing, and read common Claude Code content mistakes for related setup guidance.