Critical-risk tools in 0click Insta

Critical severity 0click Insta MCP Server 6 of 44 tools

6 of the 44 tools in 0click Insta are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

challenge_solve Destructive

Clear a wall: wait out Cloudflare/Turnstile, or solve recaptcha/hcaptcha through IG_CAPTCHA_PROVIDER
delete_post Destructive

Delete one of this account
device_delete Destructive

Delete a device directory (cookies, profile, history). Needs confirm:true
logout Destructive

Clear this device
unlike Destructive

Remove a like (idempotent)
unsave Destructive

Remove a saved post (idempotent)

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in 0click Insta

Tools at critical risk

Attacks that target this class

More on 0click Insta

Enforce policy on every 0click Insta tool call.