Understanding Token Health and Reconnection
Last updated: April 18, 2026
Meta tokens are the keys that allow Wevion to access your Meta ad accounts, fan pages, pixels, and catalogs. Keeping your tokens healthy is essential for uninterrupted campaign management and data syncing.
Prerequisites
- A connected Meta account Connecting Your Meta Account
How It Works
When you connect your Meta account to Wevion, the platform receives an access token — a credential that grants permission to interact with Meta's API on your behalf. Wevion supports two types of tokens:
User Tokens
- Obtained via: Meta OAuth login (when you click "Connect Meta Account")
- Validity: Approximately 60 days
- Refresh: Wevion automatically refreshes these before they expire
- Statuses: Active, Inactive, Expired
System User Tokens
- Obtained via: Manual configuration in Meta Business Manager
- Validity: Permanent (never expire)
- Refresh: Not needed
- Best for: Stable, long-term API access without the 60-day renewal cycle
Token Lifecycle
Automatic Refresh
Wevion proactively refreshes your User tokens to prevent expiration:
- A background job runs twice daily
- It checks all Active tokens for those expiring within 7 days
- For each expiring token, it requests a fresh long-lived token from Meta
- The new token replaces the old one across all associated resources (ad accounts, fan pages, etc.)
- System User tokens are skipped (they don't expire)
This means in most cases, your tokens stay healthy without any action from you.
Token Expiration Detection
If a token does expire (e.g., you changed your Meta password, or revoked app access), Wevion detects it automatically:
- When any API call returns an error 190 (token expired/invalid), Wevion marks the token as
EXPIRED - You receive an in-app notification: "Token Meta scaduto — Riconnetti il profilo Meta"
- The affected ad accounts continue showing historical data but can't sync new data or manage campaigns
Token Validation
Before marking a token as invalid, Wevion performs a verification step:
- Makes a lightweight
GET /mecall to confirm the token is truly invalid - Transient errors (timeouts, rate limits) do NOT disable the token
- Only confirmed invalid tokens are marked as Expired or Inactive
This prevents false positives — a temporary Meta API hiccup won't disable your token.
Token Statuses
| Status | Meaning | What to Do |
|---|---|---|
| Active | Token is working and can access Meta's API | Nothing — everything is fine |
| Inactive | Token failed validation and was disabled | Reconnect your Meta account |
| Expired | Token has expired (past its ~60-day lifetime) | Reconnect your Meta account |
Step-by-Step Guide
Checking Token Health
- Navigate to Meta Users in the sidebar (under Assets)
- You'll see a list of all connected Meta profiles
- Each profile shows:
- Token status (Active, Inactive, Expired)
- Token type (User or System User)
- Connected Business Managers
- Expiration date (for User tokens)
Reconnecting an Expired Token
- Navigate to Meta Users
- Find the token with status Expired or Inactive
- Click Reconnect (or "Connect Meta Account" if starting fresh)
- You'll be redirected to Meta's OAuth login
- Log in with the same Meta account
- Grant all requested permissions
- You'll be redirected back to Wevion with a fresh token
- The new token is automatically propagated to all your associated assets
What Permissions Are Requested
When you connect (or reconnect) your Meta account, Wevion requests these permissions:
| Permission | What It Allows |
|---|---|
| Read your email address | |
| Ads Management | Create and manage ad campaigns |
| Ads Read | Read ad account data and insights |
| Instagram Basic | Access Instagram accounts |
| Instagram Content Publish | Publish content on Instagram |
| Pages Manage Ads | Run ads from your pages |
| Pages Manage Metadata | Read page metadata |
| Pages Read Engagement | Read page engagement data |
| Pages Show List | List your pages |
| Catalog Management | Manage product catalogs |
| Instagram Manage Comments | Manage Instagram comments |
| Instagram Manage Insights | Read Instagram insights |
| Read Insights | Read ad performance data |
| Business Management | Access Business Manager resources |
Important: If you skip any permission during the OAuth flow, some features may not work. Always grant all requested permissions.
Token Permission Sync
Wevion runs a background job twice daily to keep track of which tokens can access which resources:
- Tokens that are no longer Active have their permissions invalidated
- Ad account permissions are re-synced from validated token lists
- Fan page permissions are re-synced
- System User tokens get automatic permissions for all accounts in their Business Managers
- Pixel-to-ad-account links are refreshed
This ensures that if a BM admin changes permissions in Meta, Wevion reflects those changes within 12 hours.
Error Handling
Meta API Error Categories
When a Meta API call fails, Wevion classifies the error:
| Category | Description | Wevion Response |
|---|---|---|
| Token Expired | Error code 190 | Marks token as Expired, notifies user |
| Auth Error | Error code 102 | Verifies token, may mark as Inactive |
| Rate Limited | Error codes 4, 17, 80000-80004 | Retries with longer delays (5s, 15s, 45s) |
| Blocked | Error codes 368, 1487851 | Does not retry — needs manual resolution |
| Transient | Meta says is_transient: true |
Retries with standard backoff |
| Server Error | HTTP 500+ or 429 | Retries with standard backoff |
What "Token Expired" Means for Your Account
When a token expires:
- Campaigns keep running on Meta — Meta doesn't stop campaigns because Wevion's token expired
- Data sync stops — Wevion can't fetch new insights data
- New launches blocked — You can't publish new campaigns
- Actions blocked — You can't pause, resume, or edit campaigns
- Historical data preserved — All previously synced data remains available
FAQ
Q: How do I know if my token is about to expire? A: Wevion automatically refreshes tokens 7 days before expiration, so in most cases you'll never notice. If something prevents the refresh (e.g., you changed your Meta password), you'll receive a notification.
Q: I changed my Meta password. Do I need to reconnect? A: Yes. Changing your Meta password invalidates all existing tokens. You'll need to reconnect your Meta account in Wevion.
Q: Can I have multiple Meta profiles connected? A: Yes. Each team member can connect their own Meta profile, and each gets its own token. You can also add System User tokens for server-to-server access.
Q: What's the advantage of System User tokens? A: System User tokens never expire, eliminating the 60-day renewal cycle. They're ideal for stable, long-term API access. The downside is they must be set up manually in Meta Business Manager.
Q: Why did my token become Inactive even though I didn't do anything? A: Possible causes:
- Meta detected suspicious activity and revoked the token
- The app's access was removed from your Meta account settings
- Your Business Manager admin revoked your access
- Meta's security systems flagged the token
In all cases, reconnecting your Meta account resolves the issue.
Q: Does reconnecting affect my running campaigns? A: No. Reconnecting just refreshes the token — it doesn't change anything about your active campaigns.