Skip to content

Instoryview

by instoryview · remote · no sign-in to list tools · v0.1.0 · published by GitHub user instoryview

Instagram profiles, follower/following snapshots and changes, with budgeted public lookups.

Changes · 1
CompareRegistry entry

6 tools: 1 change things and 5 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http instoryview https://instoryview.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnquery_public_account

    The server marks "query_public_account" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "query_public_account" says "query": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 1Claude Code: ask
  • query_public_accountExplicit online query of a public profile or ONE page of followers/following (one source page, usually 25 people).1 finding

    Why it is in this group

    • The name "query_public_account" says "query": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "query_public_account" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "query_public_account" says "query": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Explicit online query of a public profile or ONE page of followers/following (one source page, usually 25 people). May consume credits: a first list page needs maxCredits of at least 2 (profile + page), a next page 1. Require user authorization for this target, type and maxCredits. Generate and keep idempotencyKey before the first attempt; reuse it with identical arguments when restoring. Never automatically fetch all pages or increase budget.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 5Claude Code: allow
  • get_accountRead stored profile information and follower/following counts.No findings

    Why it is in this group

    • The name "get_account" says "get": a word for reading.
    Description, as the server wrote it
    Read stored profile information and follower/following counts. Counts may have a different observation time than lists. No online collection.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_account_changesRead detected changes in your accessible tracking history, default last seven calendar days UTC.No findings

    Why it is in this group

    • The name "get_account_changes" says "get": a word for reading.
    Description, as the server wrote it
    Read detected changes in your accessible tracking history, default last seven calendar days UTC. detectedAt is detection time, not exact Instagram action time. For the next page send username and cursor; the cursor keeps the list, dates and timezone.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_followersRead a page of the most recent accessible follower snapshot, or permitted public query cache.No findings

    Why it is in this group

    • The name "list_followers" says "list": a word for reading.
    Description, as the server wrote it
    Read a page of the most recent accessible follower snapshot, or permitted public query cache. State its asOf and partial coverage. Never collects automatically.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_followingRead a page of the most recent accessible following snapshot, or permitted public query cache.No findings

    Why it is in this group

    • The name "list_following" says "list": a word for reading.
    Description, as the server wrote it
    Read a page of the most recent accessible following snapshot, or permitted public query cache. State its asOf and partial coverage. Never collects automatically.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_trackingList your tracked accounts with profile counts and snapshot times.No findings

    Why it is in this group

    • The name "list_tracking" says "list": a word for reading.
    Description, as the server wrote it
    List your tracked accounts with profile counts and snapshot times. Reads stored data without collection charges.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http instoryview https://instoryview.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__instoryview__list_tracking",
      "mcp__instoryview__get_account",
      "mcp__instoryview__list_followers",
      "mcp__instoryview__list_following",
      "mcp__instoryview__get_account_changes"
    ],
    "ask": [
      "mcp__instoryview__query_public_account"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as instoryview. Review it before you use it.