Threads oEmbed Read: every test call fails with "insufficient access tier" (code 10, subcode 4279067) — can't complete required testing for App Review
1

App: Embed (App ID 4127775994197041), Threads App ID 2951280585213273

Issue: Cannot complete the required test API call for "Threads oEmbed Read" permission during App Review submission. Every call to the oEmbed endpoint returns:

{"error":{"message":"Application does not have permission for this action","type":"OAuthException","code":10,"error_subcode":4279067,"error_user_title":"App does not have sufficient access tier","error_user_msg":"The requested data cannot be accessed with the current app data access tier. App review might be required."}}

Already verified/ruled out: - App admin's Threads Tester invite (kay_nitikit) is Accepted/Active, not Pending (confirmed in Threads app > Website permissions, granted 2026-09-07) - Business Verification for the app's Business Manager is already Verified - Tried with the tester's Threads user access token (THAA... prefix) — same error - Tried with the app's own App Access Token (4127775994197041|APP_SECRET and 2951280585213273|APP_SECRET) — same error - Endpoint/format confirmed correct against official docs: GET https://graph.threads.net/v1.0/oembed?url=&access_token= - Added a Website platform (https://farside.co.th) and completed testing instructions in App Settings > Basic — same error persists - Checked the Graph API Explorer's "Access Token Info" for the token used — its granted perms list is: threads_basic, threads_content_publish, threads_manage_replies, threads_manage_insights, threads_read_replies, threads_manage_mentions, threads_keyword_search, threads_delete, threads_location_tagging, threads_profile_discovery, threads_share_to_instagram. There is no oembed-related scope in this list at all, on any token we've generated (user token or app token), even though "Threads oEmbed Read" shows as "Ready for testing" in the app's Permissions and Features / Use cases screen.

Request: please advise why this specific permission's Standard Access testing (normally available to app admins/testers before App Review, per Meta's own docs — "in development mode, you and any invited Tester can use every scope freely") is not working for this app, and how to complete the 1 required test call so the App Review submission can proceed. It looks like the permission was never actually attached to any token we can generate, despite following every step in the "Testing your use cases" flow.

Nitikit
Asked about a month ago