Facebook Graph API

What authentication does the Facebook Graph API use?

The Graph API uses OAuth 2.0 with permission-based access tokens. User access tokens grant permissions like user_posts, user_photos, and user_friends. Page access tokens require pages_manage_posts and pages_read_engagement. Through Jentic, these OAuth tokens are stored encrypted in your Jentic One instance and agents receive scoped tokens without handling raw app secrets.

Can I publish posts to a Facebook Page through this API?

Yes. Use POST /{page-id}/feed with a valid Page access token that has the pages_manage_posts permission. Include the message field for text content and optionally link or media attachments. The endpoint returns the created post's ID on success.

What are the rate limits for the Facebook Graph API?

The Graph API uses application-level rate limiting. Each app gets 200 calls per user per hour for user-token requests. Page-token requests are limited to 4800 calls per app per hour per page. Rate limit headers (x-app-usage, x-page-usage) are returned with each response indicating current utilization percentage.

How do I retrieve user posts and comments through Jentic?

Install the Jentic SDK with pip install jentic, then search for 'get facebook user feed' to discover the GET /{user-id}/feed operation. Jentic returns the endpoint schema with supported fields parameter options. For comments, search 'list comments on a facebook post' to load the GET /{post-id}/comments schema. Get started with Jentic One, the self-hosted execution layer.

Can I access friend lists and social connections?

The GET /{user-id}/friends endpoint returns friends who also use your app, not the complete friend list (restricted since Graph API v2.0). The response includes friend user IDs and names. Use the fields parameter to request additional profile data for each friend within a single request via field expansion.

How do I verify an access token's permissions?

Use the GET /debug_token endpoint with input_token parameter set to the token you want to inspect. The response includes the app_id, user_id, granted scopes, expiration time, and validity status. This is essential for verifying token permissions before making requests that require specific scopes.

Can I limit what my agent is allowed to do with the Facebook Graph API?

Yes. Because the Graph API carries the target id in the URL path (POST /{page-id}/feed, GET /{user-id}/photos), your self-hosted Jentic One instance lets you write rules that pin the agent to a single page or user, so it can read that feed and publish there and nothing else. You decide which operations it may call, meaning reads across other users' photos, albums, or comments stay off limits unless you add them. The OAuth token is scoped to only the permissions you grant and injected at execution time by your own instance, so your rules, not the agent, control what it can reach.