Meta Ads setup guide

Agents read and publish for your social pages and ad accounts.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Meta Ads, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Meta Ads can be connected 2 ways. Where there’s a key or token to paste, that’s usually the quickest.

System user access token

Token.

1. Create an app of type Business at https://developers.facebook.com/apps and add the Marketing API product.
2. In Meta Business Suite open Settings > Users > System users and add a system user. Assign it the ad account (manage campaigns), the app (Manage app) and, for lead ads, the Page.
3. Click Generate token, choose the app, set the expiry to Never and tick ads_read and ads_management; for leads also leads_retrieval, pages_show_list, pages_read_engagement, pages_manage_ads and pages_manage_metadata.
4. Paste the token and the ad account ID, digits only, without the act_ prefix (Ads Manager shows it in the account menu).
5. New apps start on Limited Marketing API access, which is heavily rate-limited. If you run many active ads, request Full access later with +Upgrade in the App Dashboard.

Field	What to enter
Access token	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.
Ad account ID (digits only)	Text. For example 1234567890.

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at Meta Ads until you delete or rotate it there.

Your Meta app (Facebook Login for Business)

Your OAuth app.

This way signs in with an OAuth app you create for Meta Ads, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Create an app of type Business at https://developers.facebook.com/apps and add the Marketing API and Facebook Login for Business products.
2. Under Facebook Login for Business > Settings, add https://everdeck.io/api/oauth/callback to Valid OAuth Redirect URIs.
3. Give the person who will connect a role on the app. With a role, Standard Access covers the ad accounts they own or manage and no App Review is needed.
4. Copy the App ID and App Secret (App settings > Basic) into the form, sign in and pick the ad account. Sign-in tokens last about 60 days; use a system user token to avoid reconnecting.
5. New apps start on Limited Marketing API access, which is heavily rate-limited. If you run many active ads, request Full access later with +Upgrade in the App Dashboard.

Field	What to enter
Ad account ID (digits only) (optional)	Text. For example 1234567890. Leave it empty if the sign-in reaches one ad account; when it reaches several, Everdeck lists them.

The scopes Everdeck asks for:

• ads_read
• ads_management
• business_management
• leads_retrieval
• pages_show_list
• pages_read_engagement
• pages_manage_ads
• pages_manage_metadata

Disconnecting deletes the tokens Everdeck saved. Meta revokes only the person's whole authorization of the app, which would end their other connections too: remove Everdeck under Business Integrations (Facebook) or Apps and websites.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• List ad accountsTier 0 · ReadReads outside contentmeta_ads_list_ad_accounts

  List the ad accounts these credentials can reach, with status, currency, time zone and lifetime spend.

• Get ad resultsTier 0 · ReadReads outside contentmeta_ads_get_insights

  Spend, impressions, reach, clicks, CTR, CPC, CPM and actions (results such as leads or purchases, with cost per action) for the connected ad account, by account, campaign, ad set or ad, for a date preset. Money is in the account currency.

• List campaignsTier 0 · ReadReads outside contentmeta_ads_list_campaigns

  List campaigns in the connected ad account with status, delivery status, objective and budget (in the currency's minor unit, e.g. cents).

• List ad setsTier 0 · ReadReads outside contentmeta_ads_list_ad_sets

  List ad sets in the connected ad account with status, campaign, budget (minor units), optimization goal and schedule.

• List adsTier 0 · ReadReads outside contentmeta_ads_list_ads

  List ads in the connected ad account with status, delivery status, campaign and ad set.

• Pause a campaign, ad set or adTier 3 · Externalmeta_ads_pause

  Pause a campaign, ad set or ad. Pausing a campaign pauses everything in it.

• Resume a campaign, ad set or adTier 4 · Money or irreversiblemeta_ads_activate

  Set a campaign, ad set or ad to ACTIVE so it can deliver and spend again.

• Change a budgetTier 4 · Money or irreversiblemeta_ads_update_budget

  Change the daily or lifetime budget of a campaign (campaign budget) or an ad set, in the currency's minor unit (50.00 USD = 5000). Change it where the budget lives: the campaign when it has daily_budget or lifetime_budget, otherwise its ad sets. An ad set budget can change at most 4 times an hour.

• List lead form submissionsTier 0 · ReadReads outside contentmeta_ads_list_leads

  List leads from a lead form or a lead ad with the answers (field_data), the ad and campaign they came from and whether they were organic. Leads are kept about 90 days.

What can start work

These events from Meta Ads can become tasks for your agents through Intake. How Intake works.

Once a day, the last 7 days of campaign results, so an agent can review spend and pause waste.

Connect Meta Ads first. Then, on the Intake page, open Webhooks and sources, find it under Connector triggers and select Start watching. Then, on the Rules tab, select New rule to say which requests become tasks and who gets them.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Meta Ads later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Meta Ads, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.