instagram-mcp-server
by osborn1997
Overview
An HTTP Model Context Protocol (MCP) server for integrating AI assistants with Instagram and Facebook APIs, enabling conversational automation for messaging, content management, and profile interactions.
Installation
npm startEnvironment Variables
- FB_APP_ID
- FB_APP_SECRET
- FB_PAGE_ID
- IG_ACCOUNT_ID
- FB_PAGE_ACCESS_TOKEN
- FB_USER_ACCESS_TOKEN
- FB_API_VERSION
- MCP_API_KEY
- PORT
- FB_VERIFY_TOKEN
- SUPABASE_URL
- SUPABASE_ANON_KEY
- SUPABASE_SERVICE_ROLE_KEY
- REDIS_URL
- DEFAULT_WORKSPACE_ID
Security Notes
CRITICAL: The `evaluateCondition` function in `src/engine/executor.ts` directly uses `eval(resolved.expr)` for workflow condition evaluation. This allows arbitrary code execution if an attacker can control the `condition` value within a workflow definition. This is a severe vulnerability. MODERATE: Webhook signature validation in `src/index.ts` falls back to `FB_PAGE_ACCESS_TOKEN` if `FB_APP_SECRET` is not explicitly set, which is an incorrect and less secure practice. Similarly, `FB_VERIFY_TOKEN` can default to `FB_PAGE_ACCESS_TOKEN`, which is not ideal. LOW: The `/mcp` endpoint is unprotected if `MCP_API_KEY` environment variable is not set.
Similar Servers
tmcp
A server implementation for the Model Context Protocol (MCP) to enable LLMs to access external context and tools.
openapi-mcp-server
Converts OpenAPI specifications into Model Context Protocol (MCP) tools, enabling AI assistants to interact with APIs.
MCP-Council
Automates the conversion of REST APIs into AI-powered MCP (Model Context Protocol) servers, enabling seamless integration of APIs with AI assistants.
mcp_docker
Manages Docker containers, images, networks, and volumes for AI assistants via the Model Context Protocol (MCP).