Meta (Facebook) Graph API access token
ID facebook_access_token
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
User, page or system user access token of the Meta (Facebook) Graph API. These tokens start with EAA followed by a long string of letters and digits. Meta does not publish the format; the regexp accepts EAA followed by at least 100 letters and digits, which covers the forms that gitleaks (EAAM or EAAC and 100 or more characters) and pyWhat expect. An app access token written as app ID|app secret is the datatype facebook_app_access_token.
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 65/100 · missing: examples, negative example, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Datadog Sensitive Data Scanner, GitGuardian, GitHub secret scanning, Gitleaks, pyWhat
Regular expression
^EAA[A-Za-z0-9]{100,}$
Python re syntax.
Sources
- doc: https://developers.facebook.com/docs/facebook-login/guides/access-tokens
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
- other: https://github.com/bee-san/pyWhat/blob/main/pywhat/Data/regex.json
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/facebook_access_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/facebook_access_token.yamlon GitHub