Meta (oliverames) MCP Server
@oliverames/meta-mcp-server
npm
v2.0.2
Published by @oliverames — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The most comprehensive MCP server for Meta Business Suite — 200 tools across Facebook Pages, Instagram, Threads, Ads Manager, Commerce, Conversions API, and more
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 3.6 = 96. What the published surface and source actually contain:
| Points | What was found | Category |
|---|---|---|
| −3.6 | Near-miss of exa-mcp-server MTC-SUP-005 | supply-chain |
2. Client adoption risk — 96 − 7 = 89. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 3
high Shell/command execution in server code (dist/op-fallback.js)MTC-SRC-002
In the server's implementation (`dist/op-fallback.js:1`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: ecFileSync } from "node:child_process"; /** * If the given env var is empty, attempt to resolve it from 1Password CLI.
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server dist/op-fallback.js
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([meta_browse_targeting_categories, meta_create_product_feed, meta_get_page, meta_get_page_conversations, meta_get_conversation_messages, meta_get_page_insights, meta_get_page_albums, meta_get_page_events, meta_get_page_tagged, meta_get_page_fan_demographics, meta_get_page_videos, meta_get_page_tabs, meta_get_page_picture, meta_get_page_locations, meta_get_page_cta, meta_get_page_photos, meta_get_page_ratings, meta_get_page_automated_responses]) co-exist with external-action tools ([meta_subscribe_page_webhooks]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [meta_browse_targeting_categories, meta_create_product_feed, meta_get_page, meta_get_page_conversations, meta_get_conversation_messages, meta_get_page
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow meta_browse_targeting_categories → meta_subscribe_page_webhooks
medium Near-miss of exa-mcp-server (edit distance 2)MTC-SUP-005
"@oliverames/meta-mcp-server" is edit-distance 2 from the package "exa-mcp-server". Verify this is the intended package.
Fix: Confirm you meant "exa-mcp-server". Install packages only from their documented, official name.
Location: package @oliverames/meta-mcp-server
Tools 200
Each tool and what it can reach — statically extracted from the published source.
meta_browse_targeting_categoriesingests untrusted inputmeta_create_product_feedingests untrusted inputmeta_get_conversation_messagesingests untrusted inputmeta_get_pageingests untrusted inputmeta_get_page_albumsingests untrusted inputmeta_get_page_automated_responsesingests untrusted inputmeta_get_page_conversationsingests untrusted inputmeta_get_page_ctaingests untrusted inputmeta_get_page_eventsingests untrusted inputmeta_get_page_fan_demographicsingests untrusted input
Show 190 more tools ↓
meta_get_page_insightsingests untrusted inputmeta_get_page_locationsingests untrusted inputmeta_get_page_photosingests untrusted inputmeta_get_page_pictureingests untrusted inputmeta_get_page_ratingsingests untrusted inputmeta_get_page_tabsingests untrusted inputmeta_get_page_taggedingests untrusted inputmeta_get_page_videosingests untrusted inputmeta_subscribe_page_webhooksnetwork egressmeta_block_userno sensitive capabilitymeta_check_instagram_containerno sensitive capabilitymeta_check_instagram_publishing_limitno sensitive capabilitymeta_create_adno sensitive capabilitymeta_create_ad_creativeno sensitive capabilitymeta_create_ad_labelno sensitive capabilitymeta_create_ad_ruleno sensitive capabilitymeta_create_ad_studyno sensitive capabilitymeta_create_adsetno sensitive capabilitymeta_create_broadcast_channel_pollno sensitive capabilitymeta_create_campaignno sensitive capabilitymeta_create_custom_audienceno sensitive capabilitymeta_create_custom_conversionno sensitive capabilitymeta_create_eventno sensitive capabilitymeta_create_live_videono sensitive capabilitymeta_create_lookalike_audienceno sensitive capabilitymeta_create_photo_postno sensitive capabilitymeta_create_pixelno sensitive capabilitymeta_create_postno sensitive capabilitymeta_create_productno sensitive capabilitymeta_create_saved_audienceno sensitive capabilitymeta_create_video_postno sensitive capabilitymeta_cross_postno sensitive capabilitymeta_debug_tokenno sensitive capabilitymeta_delete_adno sensitive capabilitymeta_delete_ad_ruleno sensitive capabilitymeta_delete_adsetno sensitive capabilitymeta_delete_campaignno sensitive capabilitymeta_delete_commentno sensitive capabilitymeta_delete_custom_audienceno sensitive capabilitymeta_delete_instagram_commentno sensitive capabilitymeta_delete_instagram_mediano sensitive capabilitymeta_delete_pixelno sensitive capabilitymeta_delete_postno sensitive capabilitymeta_delete_productno sensitive capabilitymeta_delete_saved_audienceno sensitive capabilitymeta_end_live_videono sensitive capabilitymeta_generate_chartno sensitive capabilitymeta_generate_comparison_chartno sensitive capabilitymeta_get_account_insightsno sensitive capabilitymeta_get_adno sensitive capabilitymeta_get_ad_accountno sensitive capabilitymeta_get_ad_account_activityno sensitive capabilitymeta_get_ad_account_usersno sensitive capabilitymeta_get_ad_creativeno sensitive capabilitymeta_get_ad_insightsno sensitive capabilitymeta_get_ad_previewno sensitive capabilitymeta_get_ad_ruleno sensitive capabilitymeta_get_ad_studiesno sensitive capabilitymeta_get_ad_study_resultsno sensitive capabilitymeta_get_adsetno sensitive capabilitymeta_get_adset_insightsno sensitive capabilitymeta_get_blocked_usersno sensitive capabilitymeta_get_broadcast_channel_messagesno sensitive capabilitymeta_get_campaignno sensitive capabilitymeta_get_campaign_insightsno sensitive capabilitymeta_get_custom_audienceno sensitive capabilitymeta_get_delivery_estimateno sensitive capabilitymeta_get_instagram_account_insightsno sensitive capabilitymeta_get_instagram_available_catalogsno sensitive capabilitymeta_get_instagram_broadcast_channelsno sensitive capabilitymeta_get_instagram_comment_repliesno sensitive capabilitymeta_get_instagram_commentsno sensitive capabilitymeta_get_instagram_conversationsno sensitive capabilitymeta_get_instagram_live_mediano sensitive capabilitymeta_get_instagram_mediano sensitive capabilitymeta_get_instagram_media_childrenno sensitive capabilitymeta_get_instagram_media_insightsno sensitive capabilitymeta_get_instagram_mentioned_mediano sensitive capabilitymeta_get_instagram_messagesno sensitive capabilitymeta_get_instagram_product_tagsno sensitive capabilitymeta_get_instagram_recent_hashtagsno sensitive capabilitymeta_get_instagram_single_mediano sensitive capabilitymeta_get_instagram_storiesno sensitive capabilitymeta_get_instagram_userno sensitive capabilitymeta_get_leadgen_leadsno sensitive capabilitymeta_get_live_videosno sensitive capabilitymeta_get_minimum_budgetsno sensitive capabilitymeta_get_pixelno sensitive capabilitymeta_get_pixel_eventsno sensitive capabilitymeta_get_pixel_statsno sensitive capabilitymeta_get_postno sensitive capabilitymeta_get_post_commentsno sensitive capabilitymeta_get_post_insightsno sensitive capabilitymeta_get_post_reactionsno sensitive capabilitymeta_get_postsno sensitive capabilitymeta_get_productno sensitive capabilitymeta_get_product_catalogno sensitive capabilitymeta_get_promotable_postsno sensitive capabilitymeta_get_published_postsno sensitive capabilitymeta_get_reach_estimateno sensitive capabilitymeta_get_scheduled_postsno sensitive capabilitymeta_get_visitor_postsno sensitive capabilitymeta_health_checkno sensitive capabilitymeta_hide_commentno sensitive capabilitymeta_hide_instagram_commentno sensitive capabilitymeta_like_objectno sensitive capabilitymeta_list_ad_accountsno sensitive capabilitymeta_list_ad_creativesno sensitive capabilitymeta_list_ad_imagesno sensitive capabilitymeta_list_ad_labelsno sensitive capabilitymeta_list_ad_rulesno sensitive capabilitymeta_list_ad_videosno sensitive capabilitymeta_list_adsno sensitive capabilitymeta_list_adsetsno sensitive capabilitymeta_list_business_assetsno sensitive capabilitymeta_list_campaignsno sensitive capabilitymeta_list_custom_audiencesno sensitive capabilitymeta_list_custom_conversionsno sensitive capabilitymeta_list_instagram_accountsno sensitive capabilitymeta_list_leadgen_formsno sensitive capabilitymeta_list_offline_event_setsno sensitive capabilitymeta_list_pagesno sensitive capabilitymeta_list_pixelsno sensitive capabilitymeta_list_product_catalogsno sensitive capabilitymeta_list_product_feedsno sensitive capabilitymeta_list_product_setsno sensitive capabilitymeta_list_productsno sensitive capabilitymeta_list_saved_audiencesno sensitive capabilitymeta_migrate_campaign_to_advantage_plusno sensitive capabilitymeta_publish_instagram_carouselno sensitive capabilitymeta_publish_instagram_containerno sensitive capabilitymeta_publish_instagram_photono sensitive capabilitymeta_publish_instagram_reelno sensitive capabilitymeta_publish_instagram_storyno sensitive capabilitymeta_publish_page_reelno sensitive capabilitymeta_publish_page_storyno sensitive capabilitymeta_reply_instagram_commentno sensitive capabilitymeta_reply_post_commentno sensitive capabilitymeta_search_ad_libraryno sensitive capabilitymeta_search_instagram_catalog_productsno sensitive capabilitymeta_search_instagram_hashtagno sensitive capabilitymeta_search_placesno sensitive capabilitymeta_search_targeting_demographicsno sensitive capabilitymeta_search_targeting_geolocationsno sensitive capabilitymeta_search_targeting_interestsno sensitive capabilitymeta_send_broadcast_channel_messageno sensitive capabilitymeta_send_conversion_eventno sensitive capabilitymeta_send_instagram_media_messageno sensitive capabilitymeta_send_instagram_messageno sensitive capabilitymeta_send_offline_eventno sensitive capabilitymeta_send_page_messageno sensitive capabilitymeta_set_away_messageno sensitive capabilitymeta_set_greetingno sensitive capabilitymeta_set_instant_replyno sensitive capabilitymeta_share_pixelno sensitive capabilitymeta_test_conversion_eventsno sensitive capabilitymeta_toggle_instagram_commentsno sensitive capabilitymeta_update_adno sensitive capabilitymeta_update_adsetno sensitive capabilitymeta_update_campaignno sensitive capabilitymeta_update_pageno sensitive capabilitymeta_update_page_coverno sensitive capabilitymeta_update_page_pictureno sensitive capabilitymeta_update_pixelno sensitive capabilitymeta_update_postno sensitive capabilitymeta_update_productno sensitive capabilitymeta_upload_ad_imageno sensitive capabilitymeta_upload_ad_videono sensitive capabilitythreads_check_rate_limitsno sensitive capabilitythreads_delete_postno sensitive capabilitythreads_get_conversationno sensitive capabilitythreads_get_followersno sensitive capabilitythreads_get_followingno sensitive capabilitythreads_get_media_childrenno sensitive capabilitythreads_get_mentionsno sensitive capabilitythreads_get_postno sensitive capabilitythreads_get_post_insightsno sensitive capabilitythreads_get_postsno sensitive capabilitythreads_get_profileno sensitive capabilitythreads_get_repliesno sensitive capabilitythreads_get_user_insightsno sensitive capabilitythreads_hide_replyno sensitive capabilitythreads_publish_carouselno sensitive capabilitythreads_publish_gifno sensitive capabilitythreads_publish_imageno sensitive capabilitythreads_publish_linkno sensitive capabilitythreads_publish_textno sensitive capabilitythreads_publish_videono sensitive capabilitythreads_repostno sensitive capabilitythreads_searchno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v2.0.2 latest |
B 89/100 | 3 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @oliverames/meta-mcp-server --onlineOther implementations of Meta 7
Independent packages implementing the same tool, scanned with the same engine. Compare all 8 side by side →
MCP Server for Facebook Marketing API integration
Read-only MCP server for Meta (Facebook) Graph API — Marketing, Pages, Instagram, WhatsApp Business
Coming soon
Enables AI assistants to manage Instagram and Threads accounts — publish content, handle comments, view insights, search hashtags, and manage DMs through the Meta Graph API
MCP server for Instagram Graph API, Threads API & Meta platform management
MCP server that helps Claude create other MCP servers with persistent knowledge
More in Learning & Documentation
stdio compatibility bridge for the hosted AgentMail MCP server
MCP server for Alfa documentation retrieval
MCP server providing Alpine.js documentation and reference
Search the official Astro framework documentation.
MCP server providing ATAG 2.0 (Authoring Tool Accessibility Guidelines) guidance for authoring tool developers
Aurais Research Reader as an MCP server — paste a paper or article, get a structured read with verbatim-verified quotes + a signed Vorion proof chain (via @vorionsys/aurais-core).