
Instagram Mcp
io.github.mcpwarePublished by GitHub account mcpwarev1.0.4Updated Oct 27, 2026
Instagram MCP — 23 tools for Instagram Graph API: posts, DMs, stories, reels, analytics.
Overview
Local MCP server exposing 23 Instagram Graph API tools so an assistant can read profile, media, comment and DM data and publish posts, reels and carousels.
- What you can do
- Read profile and account data: profile info, connected Facebook pages, account insights, token validation
- Fetch media and analytics: recent posts, per-post insights, stories, mentions, hashtag search and hashtag media, business discovery
- Publish content: single image or video, carousel, reel, plus a check of the daily publishing quota
- Manage comments: list, post, reply, delete, hide or unhide
- Handle direct messages: list conversations, read messages, send a DM (requires Meta Advanced Access)
- When to use it
- Useful when you manage an Instagram Business or Creator account and want an assistant to draft and publish content, review engagement metrics, moderate comments, or answer DMs from within a chat client.
- Requirements
- Runs as a local process (npm package, stdio). Needs an Instagram Business or Creator account linked to a Facebook Page, a Facebook developer app with the listed Instagram and Pages permissions, and the environment variables INSTAGRAM_ACCESS_TOKEN and INSTAGRAM_ACCOUNT_ID; INSTAGRAM_API_VERSION is optional. Network access to the Graph API is required.
Installation
In SourceWeft
- Open Instagram Mcp in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
[MSeeP.ai Security Assessment Badge]
@mcpware/instagram-mcp
[npm version] [npm downloads] [license] [GitHub stars] [GitHub forks]
A Model Context Protocol (MCP) server that provides seamless integration with Instagram's Graph API, enabling AI applications to interact with Instagram Business accounts programmatically.
Features
🔧 Tools (Model-controlled)
- Get Profile Info: Retrieve Instagram business profile details
- Get Media Posts: Fetch recent posts from an Instagram account
- Get Media Insights: Retrieve engagement metrics for specific posts
- Publish Media: Upload and publish images/videos to Instagram
- Get Account Pages: List Facebook pages connected to the account
- Get Conversations: List Instagram DM conversations (requires Advanced Access)
- Get Conversation Messages: Read messages from specific conversations (requires Advanced Access)
- Send DM: Reply to Instagram direct messages (requires Advanced Access)
📊 Resources (Application-controlled)
- Profile Data: Access to profile information including follower counts, bio, etc.
- Media Feed: Recent posts with engagement metrics
- Insights Data: Detailed analytics for posts and account performance
💬 Prompts (User-controlled)
- Analyze Engagement: Pre-built prompt for analyzing post performance
- Content Strategy: Template for generating content recommendations
- Hashtag Analysis: Prompt for hashtag performance evaluation
Prerequisites
- Instagram Business Account: Must be connected to a Facebook Page
- Facebook Developer Account: Required for API access
- Access Token: Long-lived access token with appropriate permissions
- Python 3.10+: For running the MCP server (required by MCP dependencies)
Required Instagram API Permissions
Standard Access (available immediately):
instagram_basicinstagram_content_publishinstagram_manage_insightsinstagram_manage_commentspages_show_listpages_read_engagementpages_manage_metadatapages_read_user_contentbusiness_management
Advanced Access (requires Meta App Review):
instagram_manage_messages- Required for Direct Messaging features
⚠️ Instagram DM Features: Reading and sending Instagram direct messages requires Advanced Access approval from Meta. See INSTAGRAM_DM_SETUP.md for the App Review process.
🔑 How to Get Instagram API Credentials
📖 Quick Start: See AUTHENTICATION_GUIDE.md for a 5-minute setup guide!
This section provides a step-by-step guide to obtain the necessary credentials for the Instagram MCP server.
Step 1: Set Up Instagram Business Account
-
Convert to Business Account (if not already):
- Open Instagram app → Settings → Account → Switch to Professional Account
- Choose "Business" → Select a category → Complete setup
-
Connect to Facebook Page:
- Go to Instagram Settings → Account → Linked Accounts → Facebook
- Connect to an existing Facebook Page or create a new one
- Important: The Facebook Page must be owned by you
Step 2: Create Facebook App
-
Go to Facebook Developers:
- Visit developers.facebook.com
- Log in with your Facebook account
-
Create New App:
- Click "Create App" → Choose "Business" → Click "Next"
- Fill in app details:
- App Name: Choose a descriptive name (e.g., "My Instagram MCP Server")
- App Contact Email: Your email address
- Click "Create App"
-
Add Instagram Basic Display Product:
- In your app dashboard, click "Add Product"
- Find "Instagram Basic Display" → Click "Set Up"
-
Configure Instagram Basic Display:
- Go to Instagram Basic Display → Basic Display
- Click "Create New App" in the Instagram App section
- Accept the terms and create the app
Step 3: Get App Credentials
- Get App ID and Secret:
- In your Facebook app dashboard, go to Settings → Basic
- Copy your App ID and App Secret
- Important: Keep the App Secret secure and never share it publicly
Step 4: Set Up Instagram Business API Access
-
Add Instagram Graph API Product:
- In your app dashboard, click "Add Product"
- Find "Instagram Graph API" → Click "Set Up"
-
Configure Permissions:
- Go to Instagram Graph API → Permissions
- Request the following permissions:
instagram_basicinstagram_content_publishinstagram_manage_insightspages_show_listpages_read_engagement
Step 5: Generate Access Token
Option A: Using Facebook Graph API Explorer (Recommended for Testing)
-
Go to Graph API Explorer:
-
Configure Explorer:
- Select your app from the dropdown
- Click "Generate Access Token"
- Select required permissions when prompted
-
Get Page Access Token:
- In the explorer, make a GET request to:
/me/accounts - Find your Facebook Page in the response
- Copy the
access_tokenfor your page
- In the explorer, make a GET request to:
-
Get Instagram Business Account ID:
- Use the page access token to make a GET request to:
/{page-id}?fields=instagram_business_account - Copy the Instagram Business Account ID from the response
- Use the page access token to make a GET request to:
Option B: Using Facebook Login Flow (Recommended for Production)
-
Set Up Facebook Login:
- In your app dashboard, add "Facebook Login" product
- Configure Valid OAuth Redirect URIs
-
Implement OAuth Flow:
-
Exchange Code for Token:
Step 6: Get Long-Lived Access Token
Short-lived tokens expire in 1 hour. Convert to long-lived token (60 days):
Step 7: Set Up Environment Variables
Create a .env file in your project root:
Step 8: Test Your Setup
Run the validation script to test your credentials:
Or test manually:
🚨 Important Security Notes
- Never commit credentials to version control
- Use environment variables or secure secret management
- Regularly rotate access tokens
- Monitor token expiration dates
- Use HTTPS only in production
- Implement proper error handling for expired tokens
🔄 Token Refresh Strategy
Long-lived tokens expire after 60 days. Implement automatic refresh:
📋 Troubleshooting Common Issues
Error: "Invalid OAuth access token"
- Check if token has expired
- Verify token has required permissions
- Ensure Instagram account is connected to Facebook Page
Error: "Instagram account not found"
- Verify Instagram Business Account ID is correct
- Check if Instagram account is properly linked to Facebook Page
- Ensure account is a Business account, not Personal
Error: "Insufficient permissions"
- Review required permissions in Facebook App
- Re-generate access token with correct scopes
- Check if app is in Development vs Live mode
Rate Limiting Issues
- Implement exponential backoff
- Cache responses when possible
- Monitor rate limit headers in API responses
Installation
- Clone the repository:
- Install dependencies:
- Set up environment variables:
- Configure the MCP server:
Configuration
Environment Variables (.env)
MCP Client Configuration
Add this to your MCP client configuration (e.g., Claude Desktop):
Usage Examples
Using with Claude Desktop
- Get Profile Information:
- Analyze Recent Posts:
- Publish Content:
Using with Python MCP Client
API Endpoints Covered
Profile Management
- Get business profile information
- Update profile details (future feature)
Media Management
- Retrieve recent posts
- Get specific media details
- Upload and publish new content
- Delete media (future feature)
Analytics & Insights
- Post engagement metrics (likes, comments, shares)
- Account insights (reach, impressions)
- Hashtag performance analysis
Account Management
- List connected Facebook pages
- Switch between business accounts
Rate Limiting & Best Practices
The server implements intelligent rate limiting to comply with Instagram's API limits:
- Profile requests: 200 calls per hour
- Media requests: 200 calls per hour
- Publishing: 25 posts per day
- Insights: 200 calls per hour
Best Practices
- Cache frequently accessed data
- Use batch requests when possible
- Implement exponential backoff for retries
- Monitor rate limit headers
Error Handling
The server provides comprehensive error handling for common scenarios:
- Authentication errors: Invalid or expired tokens
- Permission errors: Missing required permissions
- Rate limiting: Automatic retry with backoff
- Network errors: Connection timeouts and retries
- API errors: Instagram-specific error responses
Security Considerations
- Token Security: Store access tokens securely
- Environment Variables: Never commit tokens to version control
- HTTPS Only: All API calls use HTTPS
- Token Refresh: Implement automatic token refresh
- Audit Logging: Log all API interactions
Development
Project Structure
Running Tests
Contributing
- Fork the repository
- Create a feature branch (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'Add amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
Troubleshooting
Common Issues
-
"Invalid Access Token"
- Verify token is not expired
- Check token permissions
- Regenerate long-lived token
-
"Rate Limit Exceeded"
- Wait for rate limit reset
- Implement request queuing
- Use batch requests
-
"Permission Denied"
- Verify Instagram Business account setup
- Check Facebook page connection
- Review API permissions
Debug Mode
Enable debug logging by setting:
Troubleshooting
Environment Variables
Tools (23)
Profile & Account
Media & Publishing
Comments
Direct Messages
Discovery & Content
Limitations
These are Instagram Graph API limitations, not this tool's:
- Business/Creator accounts only — personal accounts are not supported
- Long-lived tokens expire after 60 days — refresh before expiry
- 200 API calls per hour rate limit
- 25 posts per day publishing limit
- DMs require Advanced Access — Meta app review required
- Hashtag search: 30 unique hashtags per 7 days
Credits
TypeScript rewrite of jlbadano/ig-mcp (Python).
More from @mcpware
License
This project is licensed under the MIT License - see the LICENSE file for details.
Support
- 📧 Email: [email protected]
- 🐛 Issues: GitHub Issues
- 📖 Documentation: Wiki
Acknowledgments
- Model Context Protocol by Anthropic
- Instagram Graph API by Meta
- FastMCP for rapid MCP development
Source: README.md at commit c6b7992
Tools
0Version history
1- v1.0.4LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts