Disconnect Meta tracking

Disconnect: revoke server-side on Meta + soft-delete locally + audit.

Flow:

Decrypt the merchant's CAPI token (if one is on file).

Best-effort call to Meta's DELETE /me/permissions so the
merchant's Meta Business Settings → Apps page also shows the
NUMU app as removed — keeps the two surfaces in sync.

Turn off pixel_enabled + capi_enabled on the store
settings JSONB.

Soft-delete the service_credentials row (is_active=False)
so the audit trail of "this token existed once" survives.

Audit log under ADMIN_CONFIG_CHANGE so a later dispute
("who turned off our Meta integration?") has a trail.

The Meta-side revoke is best-effort: if Meta is down or the token
is already invalid, the local cleanup still proceeds. Once the
merchant clicks Disconnect they expect NUMU to stop using their
data regardless of what Meta's API does.

The meta_event_log rows are intentionally retained — they're
audit data that the merchant might still need to debug a past
campaign or chase a fbtrace_id with Meta support.

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

{ "success": true, "data": { "pixel_id": "string", "pixel_enabled": false, "capi_enabled": false, "mode": "off", "capi_access_token_masked": "string", "domain_verification_token": "string", "test_event_code": "string", "consent_required": false, "debug_mode": false, "debug_mode_expires_at": "2019-08-24T14:15:22.123Z", "last_validated_at": "2019-08-24T14:15:22.123Z", "status": "disabled", "ad_account_id": "string", "page_id": "string", "purchase_trigger": "confirmed", "lead_trigger": "confirmed", "whatsapp_lead_enabled": false, "pixels": [ { "pixel_id": "string", "pixel_enabled": true, "capi_enabled": true, "label": "string", "role": "primary" } ], "consent_settings": { "granular_enabled": false, "region_default_mode": "force_opt_out", "default_analytics": true, "default_marketing": true, "default_preferences": true, "default_sale_of_data": false } }, "message": "string" }

Disconnect Meta tracking

Request

Responses