Such a tool wouldn't need to provide the FB credentials to the third party, only in the application, or as-mentioned a browser itself, with an extension.