Released February 23, 2021 | Available until June 8th, 2023 | Blog post
Applies to all apps created after February 16, 2021.
All Business type apps created after February 16, 2021 will automatically be granted Standard access to the email and public_profile permissions.
Applies to all existing apps created after February 16, 2021.
All Business type apps created before February 16, 2021 will automatically be granted Advanced access to the email and public_profile permissions. Apps that are not using the email or public_profile permissions will be downgraded to Standard access for these two permissions.
Business type apps can upgrade to Advanced access for the email and public_profile permissions without going through App Review.
Applies to v10.0+. Will apply to all versions on May 25, 2021.
Applies to v10.0+. Will apply to all versions on May 25, 2021.
The DELETE /{page-id}/tabs endpoint that was deprecated in v8.0 has been reinstated in v10.0 and will be reinstated in all versions on May 25, 2021.
Will apply to all versions on May 25, 2021.
Data uploaded to ThreatExchange with a non-zero expire_time will be permanently deleted at the expiration time indicated. If you wish to delete data that is no longer valid, set the expired_on field to the current time to have the data deleted immediately.
Additionally, all non-Facebook ThreatDescriptors will be permanently deleted once they reach the expiration date set by the creator. If your application currently has expired ThreatDescriptors that you don’t want deleted, you must extend the expiration date or set it to ‘0’ to ensure that the data never expires.
Applies to v10.0+. Will apply to all versions on May 25, 2021.
GET /?id={url}/engagement request may not match raw counts. GET /?id={url}/engagement field for the same URL will be limited to 10 requests per hour.Released February 23, 2021 | Available until October 4, 2021 | Blog post
Applies to v10.0+. Will apply to all versions May 25, 2021.
The agency_client_declaration field on the AdAccount node now requires Admin privileges for all operations.
Applies to v10.0+.
lifetime parameter (date_preset=lifetime) is disabled and replaced with date_preset=maximum, which can be used to retrieve a maximum of 37 months of data. The API will return an error when requests contain date ranges beyond the 37-month window. date_preset=maximum will be enabled and any lifetime calls will default to maximum and return only 37 months of data.Applies to 10+.
In v9.0, access to the endpoints below was restricted. Access has been restored to all apps, but apps can now only target businesses (or child businesses of those businesses) that have claimed them:
POST /<APP_SCOPED_SYSTEM_USER_ID>/access_tokensPOST /{business-id}/business_usersPOST /{business-id}/system_usersWill apply to all versions May 24, 2021.
The following endpoints will no longer accept connections targeting when creating or editing ad campaigns:
This change will not affect any existing running campaigns.
UPDATED APRIL 28, 2021: The removal of thelocation_spec and country parameters from lookalike audience creation is currently delayed. Updates on when this change will go into effect will be forthcoming.
The location_spec and country parameters will be removed from lookalike audience creation. The location for the lookalikes will be defined by the country location in the campaign’s targeting specification.
There will be no impact on existing campaigns given this change. This requirement will only impact new and edited campaigns.
The following endpoints and fields will be affected:
POST /<ad_account_id>/customaudiencesPOST /<ad_account_id>/adsetsPOST /<ad_account_id>/adaccounts?adaccounts=<SHARED_TO_AD_ACCOUNT_ID>GET /<ad_account_id>/reachestimate GET /<ad_account_id>/delivery_estimate GET /<ad_account_id>?fields=approximate_countGET /<ad_account_id>?fields=delivery_statusGET /<ad_account_id>?fields=operation_statusSee Lookalike Audiences: Upcoming Lookalike Changes for more information on these updates.