Meta Developer Tools MCP server, with a policy gate.
Connect Meta's official Developer Tools MCP server to every agent through Gentkey while keeping your bearer credential encrypted server-side, app inspection read-only, and webhook side effects behind a revocable grant.
https://app.gentkey.com/mcpclaude.ai (web & mobile) · Claude Code · Cursor · any MCP clientWhat’s free, what needs a grant.
Reads: Seven documented tools work as reads: server discovery, app inventory and configuration, App Review status, compliance requirements, API usage, and webhook subscription inspection.
Writes: Webhook subscription changes and test deliveries require one explicit grant. Meta's skill-workflow telemetry has a separate grant, and any new beta tool fails closed to the umbrella write grant until it is reviewed.
Gentkey proxies the official Meta Developer Tools MCP server (https://mcp.facebook.com/devtools) — you get the vendor’s own tools, with custody, gating, and audit added in front.
| Grant | What it governs |
|---|---|
mcp-meta-devtools.webhooks.write | Subscribing, unsubscribing, changing webhook fields, and sending real test deliveries |
mcp-meta-devtools.telemetry.write | Recording the start and end of an official Meta Developer Tools skill workflow |
mcp-meta-devtools.write | Anything outside Meta's documented ten-tool inventory, including new beta tools |
Bounds the gate enforces with arithmetic.
mcp-meta-devtools.webhooks.write · max writes/hour = 5An agent can update subscriptions or send five test deliveries in the rolling hour; the next action is denied before Meta receives it and recorded in the audit log.
Connect once, use everywhere.
Sign in at gentkey.com, add Meta Developer Tools (api key), then point each client at your endpoint. Every client completes a standard OAuth flow and lands in your Gentkey — your connections, nobody else’s.
claude.ai (web & mobile)
- Settings → Connectors
- Add custom connector
- Paste
https://app.gentkey.com/mcpand finish the OAuth prompt
Claude Code
claude mcp add --transport http \
gentkey https://app.gentkey.com/mcpCursor
// .cursor/mcp.json
{
"mcpServers": {
"gentkey": { "url": "https://app.gentkey.com/mcp" }
}
}Things agents do with Meta Developer Tools here.
- List my Meta apps and show which one is in Live mode.
- What App Review permissions are still blocking this release?
- Show API usage and throttling risk for my production app.
- List the webhook fields subscribed for this app.
- Send a test webhook delivery after I grant webhook write access.
Custody, gating, and audit — built in.
The model never sees a credential
Your Meta Developer Tools key is encrypted at rest and injected server-side at call time. Your stored credential never enters a context window.
Writes need a grant
Anything that changes state needs a capability you granted explicitly — revoke it and the next call is denied.
A trail you can act on
Every decision is attributed to the agent that made it — allowed, denied, or denied by constraint.
Fair questions.
Does Gentkey use Meta's official Developer Tools server?
Yes. Discovery and calls go to https://mcp.facebook.com/devtools. Gentkey verifies your bearer credential against that server before encrypting it, and the model never sees it.
Why is webhook testing treated as a write?
A test sends a real request to the app's configured callback, so it has an external side effect. Gentkey therefore requires mcp-meta-devtools.webhooks.write and applies its write-rate limit to tests as well as subscription changes.
What happens when an agent calls a Meta Developer Tools write tool it hasn't been granted?
The call is denied at the gateway — nothing reaches Meta Developer Tools — and the denial is recorded in the audit log along with the grant that would have authorized it, so you can decide deliberately instead of finding out later.
Where are my credentials stored?
Encrypted at rest (AES-256-GCM) on Gentkey's server and injected server-side at call time. No credential you store with Gentkey ever enters a model's context window or an agent's config file.
Can I use this from claude.ai's free plan?
Yes — and it's the strongest case for a gateway: free claude.ai accounts currently get a single custom connector, so pointing that one slot at Gentkey puts every connector you've linked behind it.
How do I revoke an agent's access?
Revoke the grant (the next write is denied) or revoke the agent's tokens entirely in one click. Other agents and their grants are untouched — no shared key to rotate.
Is Gentkey affiliated with Meta Developer Tools?
No. Gentkey is an independent MCP gateway. Trademarks belong to their owners; where an official Meta Developer Tools MCP server exists, Gentkey proxies it and adds custody, gating, and audit on top.
Often connected together.
Cut Meta Developer Tools a smaller key.
Sign in, connect Meta Developer Tools, and grant your first scoped capability in under a minute.