There are two levels of access. Read‑only is all you need for reporting and creative analysis, and it’s the safest — Goose can look at your account but can never spend money or change anything. Read/write additionally lets Goose take actions (like pausing an ad) later on. Start with read‑only.
Before you start
You’ll need:- A Meta Business (Business Manager) that owns — or has partner access to — your ad account.
- A Meta App in that business. If you don’t have one: go to developers.facebook.com → My Apps → Create App → choose Business, then add it to your business under Business settings → Accounts → Apps.
- Admin access to the business (only a business admin can create a system user and generate a token).
Connect (read‑only)
Open System Users in Business Settings
Go to business.facebook.com/settings → Users → System users.
Add a system user
Click Add, give it a name like
Gooseworks Ads, set the role to Employee, and create it.Give it access to your app
Select the new system user → Assign assets → Apps → pick your Meta app → turn on Manage app (full control) → Save changes.
Give it access to your ad account
Still on the system user → Assign assets → Ad accounts → pick your ad account → turn on View performance → Save changes.
Generate the token
Click Generate new token → choose your app → set Token expiration to Never → check the
ads_read permission → Generate token.Want Goose to take actions too? (read/write)
Read‑only covers all reporting and creative analysis. Only set this up if you want Goose to be able to act on your account (for example, pause an ad) — and note it can then affect a live, money‑spending account, so we always ask you to confirm each action. It’s the same steps as above, with three changes:1. Set the system user role to Admin
1. Set the system user role to Admin
In step 2, choose Admin instead of Employee.
2. Grant Manage campaigns on the ad account
2. Grant Manage campaigns on the ad account
In step 4, turn on Manage campaigns (instead of, or in addition to, View performance).
3. Add the ads_management permission
3. Add the ads_management permission
In step 5, check both
ads_read and ads_management before generating the token.What Goose can see
With a read‑only token, Goose can read:- Delivery metrics — spend, impressions, reach, frequency, clicks, CTR, CPC, CPM. These work for every account, no extra setup.
- Your ad structure — campaigns, ad sets, and the creatives that are running.
- Your creative images (and, where available, videos) so it can review what’s actually in your ads.
Conversions, cost‑per‑lead, cost‑per‑purchase, and ROAS only show up if your account has the Meta Pixel or Conversions API set up with conversion tracking. Without it, Goose will tell you tracking isn’t configured rather than guess — it never makes up numbers.
Your access is safe
- A read‑only token can only read — it can’t spend, launch, pause, or edit anything.
- The token is encrypted at rest and only used to talk to Meta on your behalf.
- You can revoke it anytime from Business Settings → System users → Generate new token (regenerating invalidates the old one), or disconnect it in Goose.
Troubleshooting
It says my token is valid but finds no ad accounts
It says my token is valid but finds no ad accounts
The ad‑account assignment (step 4) was almost certainly skipped or saved without a permission. Go back to your system user → Assign assets → Ad accounts, make sure your account is listed with View performance turned on, then generate a fresh token and paste it again.
Meta won't let me generate a token
Meta won't let me generate a token
Only a business admin can generate a system‑user token, and the system user needs your app assigned first (step 3). If you’re not an admin, ask whoever owns the Business Manager to run these steps or make you an admin.
I lost the token
I lost the token
Tokens are shown only once. Just generate a new one (Generate new token) — this replaces the old token — and paste the new one into Goose.
My conversion numbers are empty
My conversion numbers are empty
That’s expected if your account doesn’t have the Meta Pixel / Conversions API tracking conversions. Delivery metrics (spend, clicks, CTR, etc.) still work; conversion metrics (CPA, ROAS) need tracking set up on your side.
Next steps
Brands & brand kit
A sharp brand kit makes sharper, on‑brand ads.
Autopilot
Get a fresh batch of on‑brand ads generated on a schedule.
