Facebook and Instagram: what the Meta connection really does
A connection that exists, automations that do not exist yet: here is the exact line.
Pilotiko can link your Meta account today with two permissions, pages_show_list and pages_messaging. It posts nothing on Facebook or Instagram and answers no messages. Status: Account connection only: no automatic actions for now. The posts Pilotiko drafts for you go out through guided copy-paste.
In short
- Status: Account connection only: no automatic actions for now.
- Permissions: pages_show_list (your Pages) and pages_messaging (Messenger conversations).
- No automatic posting, no replies to messages.
- Meta Ads management is Coming soon: it has not been built.
- Posts drafted by Pilotiko are published by guided copy-paste.
What does the Facebook and Instagram connection do in Pilotiko?
It stores a Meta authorization with two Page-related permissions. No feature uses it yet.
Pilotiko files Meta under Social networks (publishing your approved content) with a connect-only status. The card on the Connections page names the long-term goal: answering your messages and posting from one place. Today neither is wired up. Pilotiko gets a token through Facebook's OAuth dialog (Graph API v19.0), encrypts it and stops there.
The link follows OAuth 2.0 [2]; the code exchange happens server-side, without PKCE. Both permissions concern Pages; neither touches your ads or your personal profile.
Drafting does not change: Pilotiko writes your posts and places them on the editorial calendar, you approve them, then you paste them into Facebook or Instagram yourself, with step-by-step guidance. Only LinkedIn has a publishing connector written, and it is still being commissioned.
- pages_show_list: according to Meta, lets the app access the list of Pages a person manages [1]. Pilotiko does not read it yet.
- pages_messaging: according to Meta, lets the app manage and access Page conversations in Messenger [1]. Pilotiko reads and sends no messages.
- Data written: none. No post, comment or reply.
- What will need approval later: any future post or reply, since it speaks to your customers in your name.
How do I connect Facebook and Instagram to Pilotiko?
Use the Facebook account of someone who manages the business Page. If Pilotiko's Meta app is not enabled for you yet, the card says so instead of showing a button.
- 1
Open the Facebook and Instagram card
Pilotiko's Connections page, Social networks and advertising group.
- 2
Click Connect
Pilotiko prepares a one-time request, valid 10 minutes, tied to your business and to you.
- 3
Sign in to Facebook
Meta's dialog lists the two permissions requested.
- 4
Pick the Pages
Allow only the business Pages you want to link.
- 5
Return to Pilotiko
The token is encrypted; the card reads Connected and notes that nothing runs automatically.
What is available, being commissioned or coming soon with Meta?
| Function | Status | Detail |
|---|---|---|
| Link the Meta account (Pages) | Account connection only: no automatic actions for now | pages_show_list and pages_messaging |
| Draft and schedule posts | Available | Approved by you, published by guided copy-paste |
| Post automatically to Facebook or Instagram | Coming soon | No Meta publishing connector |
| Reply to Messenger messages | Coming soon | Nothing read or sent |
| Manage Meta Ads | Coming soon | Not built; Pilotiko runs no ads |
What does a month of posts look like with Meta linked?
What happens to your Meta data under Law 25?
The Meta token is encrypted (AES-256-GCM) and stays on the server. Pilotiko reads no Messenger conversation today, so this link collects no information about your customers. Quebec's act requires telling people why information is collected and that they can withdraw consent [3].
If messages are read one day, they will hold your customers' personal information, and consent must then be manifest, free, enlightened and given for specific purposes [3]. See privacy and your rights.
Revoking: in Pilotiko, Disconnect erases the token and the action is logged. On Meta's side, you can remove the app from your Facebook settings; the exact path depends on your account and is not described in the Meta page we consulted.
What limits are specific to Meta?
Meta requires Business Verification for any app requesting Advanced Access [1]. Pilotiko's app has not gone through those steps yet and no real account has been tried. For a website that shows your content, see WordPress; for every connection, the Integrations page.
Meta Ads is not a hidden option: there is no ad-management code at all. Pilotiko helps plan channels and runs nothing. Customer messages arrive elsewhere, for example through Gmail, which is also being commissioned.
Frequently asked questions
Can Pilotiko post to my Facebook Page?
Not yet. The link is stored, but no Meta publishing connector exists. You publish approved posts by guided copy-paste.
Does Pilotiko answer my customers' Messenger messages?
No. The pages_messaging permission is requested, but no read or reply is wired up.
Does Pilotiko run my Facebook and Instagram ads?
No. Meta Ads management is Coming soon: it has not been built and Pilotiko runs no ads.
Is Instagram linked separately?
The link goes through your Meta account and Pages. Pilotiko has no Instagram-specific feature yet.
How do I remove Pilotiko's access to Facebook?
Click Disconnect in Pilotiko: the token is erased and the action is logged. You can also remove the app in your Facebook settings.
Why link Meta if nothing is automatic?
So the authorization is ready when publishing or messaging is switched on. You can also wait; nothing requires you to link the account now.
Sources
- Meta for Developers, Permissions Reference (accessed on October 15, 2026).
- RFC Editor (IETF), RFC 6749 : The OAuth 2.0 Authorization Framework (accessed on October 15, 2026).
- LégisQuébec, Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) (accessed on October 15, 2026).
Read next
Pilotiko integrations
Google Calendar, Outlook, Zoom, Stripe, LinkedIn, Cloudflare, Twilio and more: what each Pilotiko connection does today, with its status read from the code.
LinkedIn and Pilotiko: publishing the posts you approve
LinkedIn and Pilotiko: openid, profile and w_member_social scopes, text posts on the linked profile after your approval, and the connector's real status.
WordPress integration: Pilotiko reads your existing site
Pilotiko reads the pages, posts and Yoast tags of your WordPress site through its public REST API, with no password, to start your new site from real content.