
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@mcpware/ig-mcp
Advanced tools
Instagram MCP server — 23 tools for the Instagram Graph API. Manage posts, comments, DMs, stories, hashtags, reels, carousels, and analytics.
Instagram MCP server — 23 tools for the Instagram Graph API via Model Context Protocol.
Manage posts, comments, DMs, stories, hashtags, reels, carousels, and analytics from Claude Code, Cursor, or any MCP client.
npx @mcpware/ig-mcp
.mcp.json{
"mcpServers": {
"instagram": {
"command": "npx",
"args": ["-y", "@mcpware/ig-mcp"],
"env": {
"INSTAGRAM_ACCESS_TOKEN": "your-meta-long-lived-token",
"INSTAGRAM_ACCOUNT_ID": "your-ig-business-account-id"
}
}
}
}
Meta's token setup is a multi-step process. Follow these steps carefully.
Your IG Business/Creator account must be linked to a Facebook Page. Without this, the Graph API won't work.
instagram_basic, instagram_content_publish, pages_read_engagement, business_management, pages_show_list)instagram_manage_messages)instagram_basic, pages_show_list, pages_read_engagement, instagram_content_publish, instagram_manage_insights, instagram_manage_commentsNote: The Graph API Explorer may show "No configuration available" if permissions aren't set up yet. Make sure Step 3 is done first.
In the Graph API Explorer, run:
GET /me/accounts?fields=id,name,instagram_business_account
Find your Page in the response. The instagram_business_account.id is your INSTAGRAM_ACCOUNT_ID.
The token from Step 4 expires in 1 hour. Exchange it:
curl "https://graph.facebook.com/v19.0/oauth/access_token?\
grant_type=fb_exchange_token&\
client_id=YOUR_APP_ID&\
client_secret=YOUR_APP_SECRET&\
fb_exchange_token=YOUR_SHORT_LIVED_TOKEN"
Find your App ID and App Secret in: App Dashboard → Settings → Basic.
The returned access_token is valid for 60 days.
export INSTAGRAM_ACCESS_TOKEN="your-long-lived-token"
export INSTAGRAM_ACCOUNT_ID="your-ig-business-account-id"
npx @mcpware/ig-mcp
| Problem | Cause | Fix |
|---|---|---|
me/accounts returns empty [] | IG not connected to a Facebook Page, or you're not Page admin | Do Step 1 |
| Graph API Explorer says "No configuration available" | Permissions not added to app | Do Step 3 |
| "Generate Access Token" is disabled | Need to select "Get User Access Token" first | Click "Get Token" dropdown |
| App name rejected (contains "IG", "Insta", etc.) | Meta blocks trademarked words | Use a generic name |
| Token expired | Short-lived tokens last 1 hour | Do Step 6 for 60-day token |
(#10) To use Instagram Graph API... | IG account is Personal, not Business | Switch to Business/Creator in IG settings |
| Variable | Required | Default | Description |
|---|---|---|---|
INSTAGRAM_ACCESS_TOKEN | Yes | — | Meta long-lived access token |
INSTAGRAM_ACCOUNT_ID | Yes | — | Instagram business account ID |
INSTAGRAM_API_VERSION | No | v19.0 | Graph API version |
| Tool | Description |
|---|---|
get_profile_info | Get profile info (bio, followers, media count) |
get_account_pages | List connected Facebook pages |
get_account_insights | Account-level analytics (reach, profile views) |
validate_access_token | Check if token is valid |
| Tool | Description |
|---|---|
get_media_posts | Get recent posts with engagement metrics |
get_media_insights | Detailed analytics for a specific post |
publish_media | Publish image or video |
publish_carousel | Publish carousel (2-10 images/videos) |
publish_reel | Publish a Reel |
get_content_publishing_limit | Check daily publishing quota |
| Tool | Description |
|---|---|
get_comments | Get comments on a post |
post_comment | Post a comment |
reply_to_comment | Reply to a comment |
delete_comment | Delete a comment |
hide_comment | Hide/unhide a comment |
| Tool | Description |
|---|---|
get_conversations | List DM conversations |
get_conversation_messages | Read messages in a conversation |
send_dm | Send a direct message |
| Tool | Description |
|---|---|
search_hashtag | Search for a hashtag ID |
get_hashtag_media | Get top/recent media for a hashtag |
get_stories | Get current active stories |
get_mentions | Get posts you're tagged in |
business_discovery | Look up another business account |
These are Instagram Graph API limitations, not this tool's:
TypeScript rewrite of jlbadano/ig-mcp (Python).
MIT
FAQs
Instagram MCP server — 23 tools for the Instagram Graph API. Manage posts, comments, DMs, stories, hashtags, reels, carousels, and analytics.
The npm package @mcpware/ig-mcp receives a total of 9 weekly downloads. As such, @mcpware/ig-mcp popularity was classified as not popular.
We found that @mcpware/ig-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.