Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

io.github.mcpware/instagram-mcp

NPM · @MCPWARE/INSTAGRAM-MCP · SCANNED AUG 4

Instagram MCP — 23 tools for Instagram Graph API: posts, DMs, stories, reels, analytics.

+44 this week 69 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security86
  • No malware found by supply-chain analysis.Pass
  • Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 138 days ago).Pass
  • Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability75
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 1184 tokens (~51/item across 23 items; 23 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
  • Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @mcpware/instagram-mcp

# add to Claude Code
claude mcp add mcpware-instagram-mcp -- npx -y @mcpware/instagram-mcp
# add to Codex CLI
codex mcp add mcpware-instagram-mcp -- npx -y @mcpware/instagram-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mcpware-instagram-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mcpware/instagram-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add mcpware-instagram-mcp --command npx --arg -y --arg @mcpware/instagram-mcp
# ~/.hermes/config.yaml
mcp_servers:
  mcpware-instagram-mcp:
    command: "npx"
    args: ["-y", "@mcpware/instagram-mcp"]
// mcp.json
{
  "mcpServers": {
    "mcpware-instagram-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@mcpware/instagram-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Aug 26 +4
    • Security disclosure: fail → unverified functional
    • Stability: unverified → 0.27 functional
  • 2 Aug 26 +60
    • Provenance: unverified → fail security
    • Known CVEs: unverified → partial security
    • Install scripts: unverified → pass security
    • Malware scan: unverified → pass security
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • Schema quality: unverified → good functional
    • Maintenance: unverified → pass functional
    • Dependency health: unverified → partial functional
    • License: unverified → pass functional
    • MCP protocol: unverified → pass functional
    • Tool coverage: unverified → 100 functional
    • Licence: MIT functional
  • 1 Aug 26 −16
    • Tool coverage: 100 → unverified functional
  • 31 Jul 26 −7
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 +3
    • Malware scan: pass → unverified security
    • Dependency health: partial → unverified functional
    • Tool coverage: unverified → 100 functional
  • 28 Jul 26 −21
    • Tool coverage: 100 → unverified functional
    • Dependency health: unverified → partial functional
    • First check of Schema quality: unverified functional
  • 27 Jul 26 46

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Analysed npm/@mcpware/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 94 packages

94 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 23 exposed · ~1,184 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
business_discovery ~47

Look up another public Business or Creator account's profile. Returns bio, follower count, media count, etc.

NameTypeReqDescription
target_usernamestringyesInstagram username to look up (without @)

No output schema declared.

No examples provided.

delete_comment ~37

Delete a comment on your Instagram post. Can only delete comments on your own media.

NameTypeReqDescription
comment_idstringyesComment ID to delete

No output schema declared.

No examples provided.

get_account_insights ~57

Get account-level insights and analytics for Instagram business account

NameTypeReqDescription
account_idstringInstagram business account ID (optional)
metricsarraySpecific metrics to retrieve
periodstringTime period for insights

No output schema declared.

No examples provided.

get_account_pages ~22

Get Facebook pages connected to the account and their Instagram business accounts

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_comments ~52

Get comments on an Instagram post. Returns comment text, username, timestamp, and like count.

NameTypeReqDescription
limitintegerNumber of comments (max 100)
media_idstringyesInstagram media ID

No output schema declared.

No examples provided.

get_content_publishing_limit ~31

Check how many posts you can still publish today. Instagram limits content publishing per 24-hour period.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_conversation_messages ~50

Get messages from a specific Instagram DM conversation. Requires instagram_manage_messages permission.

NameTypeReqDescription
conversation_idstringyesInstagram conversation ID
limitintegerNumber of messages (max 100)

No output schema declared.

No examples provided.

get_conversations ~51

Get Instagram DM conversations. Requires instagram_manage_messages permission.

NameTypeReqDescription
limitintegerNumber of conversations (max 100)
page_idstringFacebook page ID (optional, auto-detected)

No output schema declared.

No examples provided.

get_hashtag_media ~72

Get top or recent media for a hashtag. Use search_hashtag first to get the hashtag ID.

NameTypeReqDescription
hashtag_idstringyesHashtag ID from search_hashtag
limitintegerNumber of posts (max 50)
media_typestringGet top or recent media

No output schema declared.

No examples provided.

get_media_insights ~61

Get detailed insights and analytics for a specific Instagram post

NameTypeReqDescription
media_idstringyesInstagram media ID
metricsarraySpecific metrics to retrieve (optional, gets all if not specified). Note: video_views only works for video posts

No output schema declared.

No examples provided.

get_media_posts ~59

Get recent media posts from Instagram account with engagement metrics

NameTypeReqDescription
account_idstringInstagram business account ID (optional)
afterstringPagination cursor
limitintegerNumber of posts to retrieve (max 100)

No output schema declared.

No examples provided.

get_mentions ~40

Get posts where your account has been tagged or @mentioned. Useful for tracking UGC.

NameTypeReqDescription
limitintegerNumber of mentions (max 100)

No output schema declared.

No examples provided.

get_profile_info ~44

Get Instagram business profile information including followers, bio, and account details

NameTypeReqDescription
account_idstringInstagram business account ID (optional, uses configured account if not provided)

No output schema declared.

No examples provided.

get_stories ~38

Get current active stories on your Instagram account. Stories expire after 24 hours.

NameTypeReqDescription
account_idstringInstagram account ID (optional)

No output schema declared.

No examples provided.

hide_comment ~58

Hide or unhide a comment on your Instagram post. Hidden comments are not visible to the public.

NameTypeReqDescription
comment_idstringyesComment ID to hide or unhide
hidebooleanTrue to hide, False to unhide

No output schema declared.

No examples provided.

post_comment ~50

Post a top-level comment on an Instagram post. Requires instagram_manage_comments permission.

NameTypeReqDescription
media_idstringyesInstagram media ID
messagestringyesComment text (max 2200 characters)

No output schema declared.

No examples provided.

publish_carousel ~64

Publish a carousel (album) post with 2-10 images or videos. All media must be publicly accessible URLs.

NameTypeReqDescription
captionstringCaption for the carousel post (optional)
image_urlsarrayyesList of 2-10 image/video URLs

No output schema declared.

No examples provided.

publish_media ~92

Upload and publish an image or video to Instagram with caption and optional location

NameTypeReqDescription
captionstringCaption for the post (optional)
image_urlstringURL of the image to publish (must be publicly accessible)
location_idstringFacebook location ID for geotagging (optional)
video_urlstringURL of the video to publish (must be publicly accessible)

No output schema declared.

No examples provided.

publish_reel ~78

Publish a Reel (short-form video) to Instagram. Video must be publicly accessible URL, MP4 format.

NameTypeReqDescription
captionstringCaption for the Reel (optional)
share_to_feedbooleanAlso share to main feed (default: true)
video_urlstringyesURL of the video to publish as Reel

No output schema declared.

No examples provided.

reply_to_comment ~53

Reply to a specific comment on an Instagram post. Requires instagram_manage_comments permission.

NameTypeReqDescription
comment_idstringyesComment ID to reply to
messagestringyesReply text (max 2200 characters)

No output schema declared.

No examples provided.

search_hashtag ~47

Search for an Instagram hashtag and get its ID. Use the returned ID with get_hashtag_media.

NameTypeReqDescription
hashtag_namestringyesHashtag to search for (with or without #)

No output schema declared.

No examples provided.

send_dm ~62

Send Instagram direct message. Requires instagram_manage_messages with Advanced Access. Can only reply within 24 hours.

NameTypeReqDescription
messagestringyesMessage text (max 1000 characters)
recipient_idstringyesInstagram Scoped User ID (IGSID) of recipient

No output schema declared.

No examples provided.

validate_access_token ~19

Validate the Instagram API access token and check permissions

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.