fbdl-mcp: Instructions file for Claude Code

FBDL MCP Server

You have access to tools for working with FBDL (Facebook Developer Language) -- a DSL used in Meta's bug bounty program (MMBRC) to create reproducible test scenarios with whitehat test users, pages, groups, and other Facebook entities.

When to use these tools

Use the FBDL tools when the user wants to:

• Create test scenarios for Meta's bug bounty program
• Generate FBDL scripts from natural language descriptions
• Validate existing FBDL scripts for correctness
• Understand what an FBDL script does
• Look up available FBDL entities, actions, or their parameters

Tool chaining pattern

Always follow this workflow when generating FBDL:

1. Understand -- Use list_entities and list_actions to check available constructs if unsure
2. Generate -- Write the FBDL script (use the generate_fbdl prompt for complex scenarios)
3. Validate -- Always call validate_fbdl on the generated script before presenting it
4. Explain -- Use explain_fbdl if the user wants to understand what a script does

Never present an FBDL script to the user without validating it first.

FBDL language reference

Script structure

An FBDL script has two blocks, each introduced by a header on its own line:

1. A [setup] block that creates test entities — one declaration per line
2. An [action] block that performs operations on those entities — one action per line

The [action] block is optional: a setup-only script (just create entities) is valid. Lines beginning with # are comments.

Setup block syntax

[setup]
  Type Label [with {key: value, ...}]
  Type Label [with {key: value, ...}]

The [setup] header sits alone on its line, and each entity goes on its own line below it (indentation is optional but conventional). Do NOT put multiple entities, or any entity, on the [setup] header line — the FBDL API rejects that.

Entity types and their required params:

Type	Required params	Key optional params
User	(none)	(none)
Page	owner	admins, editors, moderators, is_parent_location
Group	owner, privacy (public/private/public_legacy)	members, admins, visibility, allow_anonymous_posts
Album	owner, type (user/shared/page/group), place	privacy, contributors
Friendship	sender, receivers	(none -- also has NO label)
Business	owner	admins, employees, primary_page, tier, quarantine
App	owner	live (true/false), type (business/consumer/instant_games/etc)
Event	owner, place	privacy, is_past, post_permission, post_approval, co_hosts