ModelsAtlas
Explore
Atlas / MCP servers / hasdata / instagram-mcp

instagram-mcpSAFE

mcp/hasdata/instagram-mcp
MCP server by hasdata · ai agents · claude · cursor · Audited 2026-10-10
⚑ Report / re-scanSource ↗

Hosted Instagram MCP server from HasData. Public profile and post-feed tools by handle, structured JSON, for Claude, Cursor and any MCP client.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
stdio · streamable-http
License
MIT
Stars
16
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A hosted Model Context Protocol (MCP) server that gives Claude, Cursor, Windsurf and any other MCP client two read-only Instagram tools. Look up a public profile by handle, and walk its public post feed, as structured JSON.

It reads public data about accounts. It does not act as an account. There is nothing to connect and no account of yours involved anywhere in the flow.

1,000 free credits every month, no card required, which is 100 Instagram calls.

https://mcp.hasdata.com/mcp?apis=instagram

[](https://glama.ai/mcp/servers/HasData/instagram-mcp) [](https://github.com/HasData/instagram-mcp/actions/workflows/contract.yml) [](https://modelcontextprotocol.io) [](#tools)

  • Prompts and resources

[](https://www.npmjs.com/package/@hasdata/instagram-mcp) [](https://pypi.org/project/hasdata-instagram-mcp/) [](LICENSE)

Contents

  • What you need
  • Quick start
  • Example prompts
  • Tools
  • Errors and failure paths
  • Pricing, free tier and limits
  • Tool selection
  • How it compares
  • FAQ
  • HasData links
  • Development

-

Read from source at commit f2b21368ed4eOBSERVED · 2026-10-10
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (npm)
claude mcp add instagram-mcp --env HASDATA_API_KEY=${HASDATA_API_KEY} --env HASDATA_API_KEY=${HASDATA_API_KEY} -- npx -y @hasdata/[email protected]
claude-code (pypi)
claude mcp add hasdata-instagram-mcp --env HASDATA_API_KEY=${HASDATA_API_KEY} --env HASDATA_API_KEY=${HASDATA_API_KEY} -- uvx hasdata-instagram-mcp==1.0.8
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (3)

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
mcp-remote
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README.md:429
Two rows decide it. If you need to post, comment or reply, this server cannot help you at all. If you need the same fields across a hundred handles you have no relationship with, a server built around
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-10 · audit v0.4.1 · source sha f2b21368ed4efull audit observations/trust-audit/mcp-server/hasdata__instagram-mcp.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-10f2b21368ed4eSAFEB89first audit
05

Questions

What is the instagram-mcp MCP server?

Hosted Instagram MCP server from HasData. Public profile and post-feed tools by handle, structured JSON, for Claude, Cursor and any MCP client.

Is instagram-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does instagram-mcp need?

It reads HASDATA_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does instagram-mcp run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @hasdata/instagram-mcp at 1.0.1.

How current is this page?

The grade is for one exact copy of the source (f2b21368ed4e), read on 2026-10-10. The repository is watched and re-audited when it changes.

Advertisement