Skip to content

Instagram

by mcp-dir · remote · no sign-in to list tools · v0.1.0 · published by GitHub user mcp-dir

Instagram for AI agents: publish, read comments and DMs, insights, and engage from your account.

Final · 4Changes · 12
CompareRegistry entry

33 tools: 4 do something that can't be undone, 12 change things and 17 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http instagram https://api.mcp.ai/p_instagram

Findings

Matches of fixed checks, with the text they matched.

1 warn2 info
  • Warninstagram_actions_view_story

    The server marks "instagram_actions_view_story" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "instagram_actions_view_story" says "view": a word for reading.

    What this check looks for
  • Infoconnect

    The description mentions "credentials".

    Matched text

    description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

    What this check looks for
  • Infomarketplace

    The description mentions "credential".

    Matched text

    description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

33 tools

Can't be undone 4Claude Code: ask
  • instagram_actions_send_messageSend the FIRST direct message to someone who has never messaged this account (the official API cannot do this).No findings

    Why it is in this group

    • The name "instagram_actions_send_message" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send the FIRST direct message to someone who has never messaged this account (the official API cannot do this). One recipient per call, low daily cap. Returns a job_id.

    Annotations the server declares

    • title: instagram_actions_send_message
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_post_ig_user_media_publishTool to publish a media container to an Instagram Business account.No findings

    Why it is in this group

    • The name "instagram_post_ig_user_media_publish" says "post": a word for a change.
    • The description's first verb is "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Tool to publish a media container to an Instagram Business account. This action automatically waits for the container to finish processing before publishing. Instagram enforces an account-specific content-publishing rate limit over a 24-hour moving window; the exact cap varies by account and should be read live via IN… Bulk support: accepts ig_user_ids, creation_ids for batched execution.

    Annotations the server declares

    • title: instagram_post_ig_user_media_publish
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_send_imageSend an image via Instagram DM to a specific user.No findings

    Why it is in this group

    • The name "instagram_send_image" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send an image via Instagram DM to a specific user. Each send modifies inbox state; avoid bulk or automated sends without explicit user approval. Bulk support: accepts ig_user_ids, recipient_ids for batched execution.

    Annotations the server declares

    • title: instagram_send_image
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_send_text_messageSend a text message to an Instagram user via DM in an existing conversation.No findings

    Why it is in this group

    • The name "instagram_send_text_message" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a text message to an Instagram user via DM in an existing conversation. Cannot initiate new DM threads — a prior conversation must exist. Requires an Instagram Business or Creator account with messaging permissions. Fails with error_subcode 2534022 if outside the messaging window; do not retry these failures. Bulk support: accepts ig_user_ids, recipient_ids, reply_to_message_ids for batched execution.

    Annotations the server declares

    • title: instagram_send_text_message
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Changes things 12Claude Code: ask
  • authenticateMCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization: Bearer <token>` for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "<jwt>" } after the user pastes, or with no args to get the link.

    Annotations the server declares

    • title: Authenticate
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_actions_followFollow one or more Instagram users by @username.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Follow one or more Instagram users by @username. Returns a job_id.

    Annotations the server declares

    • title: instagram_actions_follow
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_actions_likeLike one or more Instagram posts, addressed by post URL or shortcode (NOT the numeric media id the official API returns).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Like one or more Instagram posts, addressed by post URL or shortcode (NOT the numeric media id the official API returns). Returns a job_id; poll instagram_actions_get_job_status.

    Annotations the server declares

    • title: instagram_actions_like
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_actions_like_commentLike one or more comments.No findings

    Why it is in this group

    • The name "instagram_actions_like_comment" says "comment": a word for a change.
    Description, as the server wrote it
    Like one or more comments. Each comment_id MUST come from instagram_actions_list_comments. The id returned by the official instagram_get_ig_media_comments belongs to a different namespace and is rejected. Returns a job_id; poll instagram_actions_get_job_status.

    Annotations the server declares

    • title: instagram_actions_like_comment
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_actions_unfollowUnfollow one or more Instagram users by @username.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Unfollow one or more Instagram users by @username. Returns a job_id.

    Annotations the server declares

    • title: instagram_actions_unfollow
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_actions_view_storyWatch (mark as seen) the stories of one or more profiles.1 finding

    Why it is in this group

    • The name "instagram_actions_view_story" says "view": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "instagram_actions_view_story" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "instagram_actions_view_story" says "view": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Watch (mark as seen) the stories of one or more profiles. Omit `targets` to watch the home tray. Returns a job_id.

    Annotations the server declares

    • title: instagram_actions_view_story
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_mark_seenMark Instagram DM messages as read/seen for a specific user.No findings

    Why it is in this group

    • The name "instagram_mark_seen" says "mark": a word for a change.
    Description, as the server wrote it
    Mark Instagram DM messages as read/seen for a specific user. Sends a 'mark_seen' sender action to indicate messages from the specified recipient have been read. Marking as seen is visible to the other party and changes inbox read state — use with explicit user approval in automated or bulk flows. IMPORTANT LIMITATIONS… Bulk support: accepts ig_user_ids, recipient_ids for batched execution.

    Annotations the server declares

    • title: instagram_mark_seen
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_post_ig_comment_repliesTool to create a reply to an Instagram comment.No findings

    Why it is in this group

    • The name "instagram_post_ig_comment_replies" says "post": a word for a change.
    Description, as the server wrote it
    Tool to create a reply to an Instagram comment. Use when you need to reply to a specific comment on an Instagram post owned by a Business or Creator account. The reply must be 300 characters or less, contain at most 4 hashtags and 1 URL, and cannot consist entirely of capital letters. Bulk support: accepts ig_comment_ids for batched execution.

    Annotations the server declares

    • title: instagram_post_ig_comment_replies
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • instagram_post_ig_user_mediaTool to create a media container for Instagram posts.No findings

    Why it is in this group

    • The name "instagram_post_ig_user_media" says "post": a word for a change.
    Description, as the server wrote it
    Tool to create a media container for Instagram posts. Use this to create a container for images, videos, Reels, or carousels. This is the first step in Instagram's two-step publishing process - after creating the container, use the media_publish endpoint to publish it. Bulk support: accepts ig_user_ids, location_ids for batched execution.

    Annotations the server declares

    • title: instagram_post_ig_user_media
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • marketplaceThe official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

      What this check looks for
    Description, as the server wrote it
    The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/<slug> link that opens without login.

    Annotations the server declares

    • title: Marketplace
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • report_bugReport a bug, missing feature, or send feedback.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.

    Annotations the server declares

    • title: Report Bug
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 17Claude Code: allow
  • connectReturns connection status and URLs.1 finding

    Why it is in this group

    • The description's first verb is "return": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

      What this check looks for
    Description, as the server wrote it
    Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.

    Annotations the server declares

    • title: Connection Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_actions_get_job_statusGet the status/progress/result of a previously started action by its job_id.No findings

    Why it is in this group

    • The name "instagram_actions_get_job_status" says "get": a word for reading.
    Description, as the server wrote it
    Get the status/progress/result of a previously started action by its job_id. Bulk support: accepts job_ids for batched execution.

    Annotations the server declares

    • title: instagram_actions_get_job_status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_actions_list_accountsList the Instagram accounts connected to this install — id, username, label.No findings

    Why it is in this group

    • The name "instagram_actions_list_accounts" says "list": a word for reading.
    Description, as the server wrote it
    List the Instagram accounts connected to this install — id, username, label.

    Annotations the server declares

    • title: instagram_actions_list_accounts
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_actions_list_commentsList the comments on a post, addressed by URL or shortcode.No findings

    Why it is in this group

    • The name "instagram_actions_list_comments" says "list": a word for reading.
    Description, as the server wrote it
    List the comments on a post, addressed by URL or shortcode. Returns each comment_id in the form that instagram_actions_like_comment accepts. The official API returns a DIFFERENT id that is not accepted there. Returns a job_id; poll instagram_actions_get_job_status.

    Annotations the server declares

    • title: instagram_actions_list_comments
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_actions_list_jobsList recent action jobs for the connected account, optionally filtered by status.No findings

    Why it is in this group

    • The name "instagram_actions_list_jobs" says "list": a word for reading.
    Description, as the server wrote it
    List recent action jobs for the connected account, optionally filtered by status.

    Annotations the server declares

    • title: instagram_actions_list_jobs
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_actions_list_storiesList a specific user's currently available stories (read-only, does not mark as seen).No findings

    Why it is in this group

    • The name "instagram_actions_list_stories" says "list": a word for reading.
    Description, as the server wrote it
    List a specific user's currently available stories (read-only, does not mark as seen). Returns a job_id (or the result inline when wait=true).

    Annotations the server declares

    • title: instagram_actions_list_stories
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_get_conversationGet details about a specific Instagram DM conversation (participants, etc).No findings

    Why it is in this group

    • The name "instagram_get_conversation" says "get": a word for reading.
    Description, as the server wrote it
    Get details about a specific Instagram DM conversation (participants, etc). Requires a Business or Creator account with Instagram messaging permissions; personal accounts will return permission errors. Newly sent/received messages may take a few seconds to appear in results. Bulk support: accepts conversation_ids for batched execution.

    Annotations the server declares

    • title: instagram_get_conversation
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_get_ig_mediaGet a published Instagram Media object (photo, video, story, reel, or carousel).No findings

    Why it is in this group

    • The name "instagram_get_ig_media" says "get": a word for reading.
    Description, as the server wrote it
    Get a published Instagram Media object (photo, video, story, reel, or carousel). Use when you need to retrieve detailed information about a specific Instagram post including engagement metrics, caption, media URLs, and metadata. NOTE: This action is for published media only. For unpublished container IDs (from INSTAGR… Bulk support: accepts ig_media_ids for batched execution.

    Annotations the server declares

    • title: instagram_get_ig_media
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_get_ig_media_commentsTool to retrieve comments on an Instagram media object.No findings

    Why it is in this group

    • The name "instagram_get_ig_media_comments" says "get": a word for reading.
    Description, as the server wrote it
    Tool to retrieve comments on an Instagram media object. Use when you need to fetch comments from a specific Instagram post, photo, video, or carousel owned by the connected Business/Creator account. Supports cursor-based pagination for navigating through large comment lists. An empty data array in the response indicat… Bulk support: accepts ig_media_ids for batched execution.

    Annotations the server declares

    • title: instagram_get_ig_media_comments
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_get_ig_media_insightsRead media insights.No findings

    Why it is in this group

    • The name "instagram_get_ig_media_insights" says "get": a word for reading.
    Description, as the server wrote it
    Read media insights. REST response: read result.result.data. Request metric=[views,reach,saved,shares] for views, reach, saves and shares; availability depends on the media type and metric. Bulk support: accepts ig_media_ids for batched execution.

    Annotations the server declares

    • title: instagram_get_ig_media_insights
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_get_ig_user_mediaList account media.No findings

    Why it is in this group

    • The name "instagram_get_ig_user_media" says "get": a word for reading.
    Description, as the server wrote it
    List account media. REST response: read result.result.data and result.result.paging (not result.data). Null engagement fields mean unavailable, not zero; use media insights for saved, shares and views. Bulk support: accepts ig_user_ids, auto_resolve_fb_page_ids for batched execution.

    Annotations the server declares

    • title: instagram_get_ig_user_media
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_get_user_infoGet Instagram Business Account info including profile details and statistics.No findings

    Why it is in this group

    • The name "instagram_get_user_info" says "get": a word for reading.
    Description, as the server wrote it
    Get Instagram Business Account info including profile details and statistics. Use "me" to query your own authenticated account, or provide the numeric Business Account ID of an account you manage. NOTE: followers_count and follows_count are returned for your own profile (ig_user_id="me"). For other accounts, follower/… Bulk support: accepts ig_user_ids for batched execution.

    Annotations the server declares

    • title: instagram_get_user_info
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_get_user_insightsRead account insights at result.result.data in REST.No findings

    Why it is in this group

    • The name "instagram_get_user_insights" says "get": a word for reading.
    Description, as the server wrote it
    Read account insights at result.result.data in REST. An empty data array means insights are unavailable, not zero. It does not by itself establish a follower-count restriction. Bulk support: accepts ig_user_ids for batched execution.

    Annotations the server declares

    • title: instagram_get_user_insights
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_list_all_conversationsList all Instagram DM conversations for the authenticated user.No findings

    Why it is in this group

    • The name "instagram_list_all_conversations" says "list": a word for reading.
    Description, as the server wrote it
    List all Instagram DM conversations for the authenticated user. Requires a Business/Creator account with messaging permissions; personal accounts return empty results. Response conversations are nested under `data.data` — accessing top-level `data` as the final list returns zero items. An empty `data` list is a valid … Bulk support: accepts user_ids, ig_user_ids for batched execution.

    Annotations the server declares

    • title: instagram_list_all_conversations
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • instagram_list_all_messagesList all messages from a specific Instagram DM conversation.No findings

    Why it is in this group

    • The name "instagram_list_all_messages" says "list": a word for reading.
    Description, as the server wrote it
    List all messages from a specific Instagram DM conversation. Requires a Business or Creator account with messaging permissions; personal accounts return empty results. Response data is nested under data.data (double-wrapped); attachment-only messages may have empty text fields. Bulk support: accepts conversation_ids for batched execution.

    Annotations the server declares

    • title: instagram_list_all_messages
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • show_versionShow the current MCP platform and adapter versions.No findings

    Why it is in this group

    • The name "show_version" says "show": a word for reading.
    Description, as the server wrote it
    Show the current MCP platform and adapter versions.

    Annotations the server declares

    • title: Show Version
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • toolkit_infoReturns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.

    Annotations the server declares

    • title: Toolkit Info
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http instagram https://api.mcp.ai/p_instagram

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__instagram__instagram_actions_list_accounts",
      "mcp__instagram__instagram_actions_list_comments",
      "mcp__instagram__instagram_actions_list_stories",
      "mcp__instagram__instagram_actions_get_job_status",
      "mcp__instagram__instagram_actions_list_jobs",
      "mcp__instagram__instagram_get_user_info",
      "mcp__instagram__instagram_get_ig_user_media",
      "mcp__instagram__instagram_get_ig_media",
      "mcp__instagram__instagram_get_ig_media_comments",
      "mcp__instagram__instagram_get_ig_media_insights",
      "mcp__instagram__instagram_get_user_insights",
      "mcp__instagram__instagram_get_conversation",
      "mcp__instagram__instagram_list_all_conversations",
      "mcp__instagram__instagram_list_all_messages",
      "mcp__instagram__show_version",
      "mcp__instagram__connect",
      "mcp__instagram__toolkit_info"
    ],
    "ask": [
      "mcp__instagram__instagram_actions_like",
      "mcp__instagram__instagram_actions_like_comment",
      "mcp__instagram__instagram_actions_follow",
      "mcp__instagram__instagram_actions_unfollow",
      "mcp__instagram__instagram_actions_view_story",
      "mcp__instagram__instagram_actions_send_message",
      "mcp__instagram__instagram_post_ig_user_media",
      "mcp__instagram__instagram_create_carousel_container",
      "mcp__instagram__instagram_post_ig_user_media_publish",
      "mcp__instagram__instagram_post_ig_comment_replies",
      "mcp__instagram__instagram_send_text_message",
      "mcp__instagram__instagram_send_image",
      "mcp__instagram__instagram_mark_seen",
      "mcp__instagram__report_bug",
      "mcp__instagram__marketplace",
      "mcp__instagram__authenticate"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as instagram. Review it before you use it.