Instagram setup guide

Agents read and publish for your social pages and ad accounts.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Instagram, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Instagram can be connected 2 ways. Where there’s a key or token to paste, that’s usually the quickest.

Access token from your Meta app

Token.

1. Make sure the Instagram account is a professional account (Business or Creator) and is public.
2. Create an app of type Business at https://developers.facebook.com/apps and add the Instagram product.
3. Open Instagram > API setup with Instagram business login, add the account, and click Generate token next to it.
4. Sign in to Instagram, copy the token and paste it here. Dashboard tokens last 60 days and Everdeck doesn't renew them: generate a new one and update the connection before then, or connect with Instagram business login instead, whose sign-ins Everdeck renews.

Field	What to enter
Instagram access token	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at Instagram until you delete or rotate it there.

Your Meta app (Instagram business login)

Your OAuth app.

This way signs in with an OAuth app you create for Instagram, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Make sure the Instagram account is a professional account (Business or Creator) and is public.
2. Create an app of type Business at https://developers.facebook.com/apps and add the Instagram product.
3. Open Instagram > API setup with Instagram business login > Set up Instagram business login, and add https://everdeck.io/api/oauth/callback as an OAuth redirect URI.
4. Copy the Instagram app ID and Instagram app secret shown there (not the Meta App ID) into the form, then sign in with the Instagram account.
5. Everdeck renews the sign-in by itself while the connection is in use (at least once every 50 days).

The scopes Everdeck asks for:

• instagram_business_basic
• instagram_business_content_publish
• instagram_business_manage_comments
• instagram_business_manage_messages
• instagram_business_manage_insights

Disconnecting deletes the tokens Everdeck saved. Instagram's business login documents no revocation endpoint: remove the app in Instagram.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• Get account profileTier 0 · ReadReads outside contentinstagram_get_profile

  Username, name, account type and follower, following and post counts of the connected account.

• List postsTier 0 · ReadReads outside contentinstagram_list_media

  List the account's posts and reels, newest first, with caption, type, permalink, time and like and comment counts. Stories are not included.

• Publish a post, reel or storyTier 3 · ExternalReads outside contentinstagram_publish_post

  Publish an image post, a reel, a story or a carousel (2 to 10 items) from public media URLs. Images must be JPEG. Returns the new media ID and permalink.

• List comments on a postTier 0 · ReadReads outside contentinstagram_list_comments

  List comments on one of the account's posts with author username, text, time, likes and hidden state.

• Reply to a commentTier 3 · Externalinstagram_reply_to_comment

  Reply publicly to a comment on one of the account's posts.

• Hide or unhide a commentTier 3 · Externalinstagram_hide_comment

  Hide a comment on one of the account's posts from the public, or unhide it. Prefer this to deleting.

• Delete a commentTier 4 · Money or irreversibleinstagram_delete_comment

  Permanently delete a comment on one of the account's posts.

• Get post insightsTier 0 · ReadReads outside contentinstagram_get_media_insights

  Lifetime metrics for one post or reel: views, reach, likes, comments, shares, saves and total interactions. For stories use views, reach, replies, navigation, shares and total_interactions.

• Get account insightsTier 0 · ReadReads outside contentinstagram_get_account_insights

  Account totals for a date range: reach, views, accounts engaged, total interactions and follows and unfollows.

• List direct message conversationsTier 0 · ReadReads outside contentinstagram_list_conversations

  List the account's direct message conversations with their last update time and the participants.

• Read a direct message conversationTier 0 · ReadReads outside contentinstagram_get_conversation_messages

  Read the most recent messages (up to 20) in a direct message conversation, with sender and time.

• Send a direct messageTier 3 · Externalinstagram_send_message

  Reply to a person by direct message. Only works within 24 hours of their last message to the account.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Instagram later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Instagram, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.