Instagram MCP servers compared (2026): official API vs password and cookie servers
There are dozens of Instagram MCP servers. Before the feature list, check how a server reaches your account: through Meta's official API, or by logging in as you.
Written by CommentKeyword, which makes one of the servers below. Facts about other tools come from their own pages, checked in October 2026. Features and plans change, so check with each vendor before you choose.
Is there an official Instagram MCP?
No. As of October 2026, Meta has an official MCP server for advertising (the Meta Ads MCP), which covers paid campaigns. It has no official MCP server for organic Instagram: your posts, comments and DMs.
So every Instagram MCP server for organic content is built by a third party. Some connect through Meta's official Instagram API. Others log in with your password or a session cookie, or scrape public pages.
Three ways a server can reach Instagram
Official API
You connect a professional account through Meta's login and approve specific permissions. The tool gets a token, never your password. Meta's developer policies apply, and the tool can only do what the API allows.
Password or session cookie
The server logs in as you, the way a person does in the app or the browser. It can reach things the API doesn't, but Instagram never approved that access, and whoever holds the credentials controls your account.
Scraping public data
The server collects public profiles, posts or hashtags without acting on your account. It's used for research and works outside Meta's API. Most of the Instagram servers in the official MCP Registry are scrapers.
Comparison by type of server
What each type of server usually covers. Individual tools vary, so treat this as a map, not a verdict.
| Type | How it connects | Hosted or local | Analytics | Publishing | Comments | DMs | Comment-to-DM | Free tier | Open source |
|---|---|---|---|---|---|---|---|---|---|
| Analytics connectorsWindsor.ai, Supermetrics, Porter Metrics | The vendor's own Instagram connection | Hosted | Yes | No | No | No | No | Some | Varies |
| SchedulersMetricool, Buffer, Planoly, Postiz | The vendor's own Instagram connection | Mostly hosted | Some | Yes | Varies | Varies | No | Some | Some |
| All-in-one social APIsZernio, Upload-Post, Ayrshare | The vendor's own Instagram connection | Mostly hosted | Some | Yes | Yes | Yes | Some | Some | Some |
| Comment-to-DM toolsCommentKeyword, HookSend, Inrō, DMParrot, SetSmart | The vendor's own Instagram connection | Mostly hosted | No | No | Yes | Yes | Yes | Some | Some |
| Password or cookie serversMany community projects on GitHub | Your password or session cookie | Local | Varies | Varies | Varies | Varies | Varies | Yes | Yes |
| ScrapersApify and many servers in the MCP Registry | No login: public pages | Varies | Public data only | No | Public data only | No | No | Usually paid per result | Varies |
Named examples
Only what each vendor's own pages confirmed in October 2026. We left out prices, because they change and depend on the plan.
| Tool | Instagram scope | Hosted or local | Free tier | Where it's listed |
|---|---|---|---|---|
| CommentKeyword | Comment-to-DM automations: keyword, public replies, DMs, next-post targeting, AI follow-up (paid plans). Official API. | Local (npx) today; remote planned | Yes: Free plan with the API | GitHub, open source (MIT) |
| Zernio (formerly Late) | Publishing (all formats), comments, DMs, comment-to-DM by keyword, insights. Official API. | Hosted (OAuth or API key) | Yes: 2 accounts | ChatGPT developer mode |
| Metricool | Publishing and analytics. No comments or DMs. | Hosted | Yes: free plan | Claude connector directory (verified) |
| Windsor.ai | Analytics (read only). | Hosted | Yes | Claude connector directory (verified) |
| Buffer | Publishing and scheduling only. | MCP server, API and CLI | Yes: free plan | Claude directory (community) |
| Upload-Post | Publishing, analytics, comments, DMs and automatic DMs. | Hosted, plus an MIT-licensed local server | Yes: limited uploads | Custom connector |
| Postiz | Publishing. | Hosted, or self-hosted | Self-hosting | ChatGPT app directory |
| HookSend | Comment-to-DM. | Hosted | Trial only | Official MCP Registry |
| Inrō | DMs, contacts and comment-to-DM. | Hosted | No: paid plan | Custom connector; ChatGPT (beta) |
What happens when an MCP server logs in with your password or cookie
Your credentials leave your hands
The server keeps your password or session cookie in a config file, on your computer or on a server you don't control. Anyone who gets it can act as your account.
Instagram never approved the access
Meta's Platform Terms and Developer Policies govern apps on the official API: consent before acting for someone, opt-in before messaging people, no spam or high-frequency bots. A password-based server skips that system. If Instagram flags the logins or the activity as automated, your account is the one that gets challenged or restricted, not the tool.
It can break without warning
Unofficial access depends on how Instagram's app and website work today. When they change, the server can stop working until someone fixes it.
The official API has limits too
It only works with professional accounts, DMs follow Instagram's messaging windows, and each comment gets one private reply within 7 days. Those limits are the cost of working the way Meta allows.
Read more about comment-to-DM without scraping and whether Instagram DM automation is allowed.
How to choose, by job
Analytics and reporting
Use an analytics connector. Metricool, Windsor.ai and Supermetrics are verified in Claude's connector directory, as of October 2026.
Publishing and scheduling
Use a scheduler with an MCP server or connector, such as Metricool, Buffer or Postiz. Claude writes the post; the scheduler publishes it through its own Instagram connection.
Everything in one connector
All-in-one social APIs such as Zernio cover publishing, comments, DMs and insights in one hosted server. Zernio's free tier covers 2 accounts, as of October 2026.
Comment-to-DM
If the job is "comment GUIDE and get the link by DM", pick a tool built for it: keyword matching that doesn't misfire, targeting the next post, DM variants, link tracking and follow-up after the first DM.
Research on other accounts
That is scraper territory. It works outside Meta's API and doesn't act on your account, so keep it separate from the tools that do.
Where CommentKeyword fits
A comment-to-DM tool with an open-source MCP server and Agent Skill. Not an all-in-one.
- Official API: it connects through Meta's Instagram login with permissions for your profile, comments and messages. No password.
- Free plan with the API and the MCP server included: 300 automated DMs a month and 3 active keywords.
- Open source: the MCP server and the comment-to-DM Agent Skill are MIT-licensed on GitHub. The CommentKeyword service itself is a hosted product.
- Comment-to-DM depth: whole-word keyword matching, matching without accents, next-post targeting, up to 10 DM and public-reply variants, link tracking, and AI agents that continue the conversation (paid plans).
- Local today: the server runs on your computer with npx, in Claude Code, Claude Desktop, Cursor, Windsurf and Codex. A remote version for claude.ai and ChatGPT is planned.
- It doesn't publish, read analytics or read your inbox. Pair it with a scheduler or an analytics connector if you need those.
Frequently asked questions
Is there an official Instagram MCP server?
No. As of October 2026, Meta's official MCP server covers advertising (the Meta Ads MCP), not organic Instagram. Instagram MCP servers for posts, comments and DMs are all third-party, so check whether they use Meta's official API.
Are Instagram MCP servers that use my password safe?
They carry risks the official API doesn't: your password or session cookie sits in a config file or on someone else's server, Instagram never approved the access, and if the activity gets flagged it's your account that is restricted. Prefer servers that connect through Meta's official login.
Which Instagram MCP servers are free?
As of October 2026, several have free tiers: CommentKeyword's Free plan includes the API and the MCP server, Zernio is free for 2 accounts, and Metricool, Buffer and Windsor.ai have free plans. Limits differ, so check each vendor.
What's the difference between a hosted and a local MCP server?
A local server runs on your computer (for example with npx) and works in apps that can start one, such as Claude Code, Claude Desktop, Cursor, Windsurf and Codex. A hosted server is reached by URL, which claude.ai in the browser and ChatGPT require.
Can an MCP server send Instagram DMs?
Through the official API, yes, within Instagram's rules: a private reply to a comment (one per comment, within 7 days of it), and more messages within 24 hours after the person writes back. CommentKeyword's comment-to-DM works exactly that way.
Does CommentKeyword's MCP server work with ChatGPT?
Not yet. ChatGPT connects to remote servers, and CommentKeyword's server runs locally today. A remote version is planned.
Comment-to-DM from Claude, on the official API
Free plan, open-source MCP server, and no Instagram password.