On this page
META AND ACCOUNTS
Permanent access token
A permanent access token is a Meta access token that does not expire on a timer. In practice it is a system user token generated inside a Business Portfolio with the assets and permissions it needs; it stays valid until it is explicitly revoked, the system user is deleted, or Meta invalidates it for a security reason.
system user tokenapp secreterror 190api keys
Why it matters
Short-lived user tokens (one to two hours) and 60-day extended tokens are fine for testing but unsuitable for production messaging: an expired token stops every send and webhook silently. Permanent tokens solve that, at the cost of needing careful storage and rotation, because they never time out on their own.
In VGraple CRM
The token stored on your channel after Embedded Signup is a permanent system user token scoped to your WABA. VGraple CRM monitors it and offers reconnect if Meta revokes it. For your own API integrations, create API keys in VGraple CRM instead of handling Meta tokens directly; the API keys guide explains scopes and rotation.