Instagram error 190: Access token expired, revoked, or invalid

Subcode 467 is the error-handling reference's catch-all inside the 190 family: the token is "expired, been revoked, or is otherwise invalid", without committing to which. In practice it most often means active revocation rather than quiet expiry - the user removed your app under Settings > Apps and Websites, an admin removed the connection from Business Manager, or Meta invalidated the token after a security event.

Functionally you handle it like any dead token, but the distinction from 463 matters for what you tell the account owner: 463 is your refresh pipeline's fault and is fixable silently, while 467 usually reflects a deliberate action on the account and needs a human to reauthorize. Treat repeated 467s after fresh reconnects as a signal that someone or something keeps revoking the app - check for a second tool "cleaning up" connected apps, or a security policy at the business.

Make revocation a first-class event in your product: detect the first 467, mark the channel disconnected, notify the owner with a reconnect link, and stop the send queue so you do not burn rate limits on a dead credential. Keep exactly one storage location for the token so replacements are atomic. The broader token triage lives under the 190 hub entry and in the Instagram troubleshooting guide.