# 0click Insta MCP server

Agent View of the PolicyLayer registry record for 0click Insta: identity, probed posture, risk grade, and all 44 tools classified. HTML page: https://policylayer.com/tools/0click-insta

## Facts

- Server id: `akufikri/0click-insta`
- Homepage: https://github.com/akufikri/0click-insta
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 44
- Tool categories present: Destructive, Execute, Read, Write
- Tags: 0click insta, admin, automation
- Record last modified: 2026-11-06T07:29:26.278Z

## Tools (44)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `challenge_solve` | Destructive | Critical | https://policylayer.com/tools/0click-insta/challenge-solve.md |
| `delete_post` | Destructive | Critical | https://policylayer.com/tools/0click-insta/delete-post.md |
| `device_delete` | Destructive | Critical | https://policylayer.com/tools/0click-insta/device-delete.md |
| `logout` | Destructive | Critical | https://policylayer.com/tools/0click-insta/logout.md |
| `unlike` | Destructive | Critical | https://policylayer.com/tools/0click-insta/unlike.md |
| `unsave` | Destructive | Critical | https://policylayer.com/tools/0click-insta/unsave.md |
| `device_start` | Execute | High | https://policylayer.com/tools/0click-insta/device-start.md |
| `device_stop` | Execute | High | https://policylayer.com/tools/0click-insta/device-stop.md |
| `eval_page` | Execute | High | https://policylayer.com/tools/0click-insta/eval-page.md |
| `unfollow_bulk` | Execute | High | https://policylayer.com/tools/0click-insta/unfollow-bulk.md |
| `unfollow_selected` | Execute | High | https://policylayer.com/tools/0click-insta/unfollow-selected.md |
| `captcha_state` | Read | Low | https://policylayer.com/tools/0click-insta/captcha-state.md |
| `challenge_probe_text` | Read | Low | https://policylayer.com/tools/0click-insta/challenge-probe-text.md |
| `challenge_status` | Read | Low | https://policylayer.com/tools/0click-insta/challenge-status.md |
| `device_list` | Read | Low | https://policylayer.com/tools/0click-insta/device-list.md |
| `dm_list` | Read | Low | https://policylayer.com/tools/0click-insta/dm-list.md |
| `feed` | Read | Low | https://policylayer.com/tools/0click-insta/feed.md |
| `follow` | Read | Low | https://policylayer.com/tools/0click-insta/follow.md |
| `follow_status` | Read | Low | https://policylayer.com/tools/0click-insta/follow-status.md |
| `followers_list` | Read | Low | https://policylayer.com/tools/0click-insta/followers-list.md |
| `following_list` | Read | Low | https://policylayer.com/tools/0click-insta/following-list.md |
| `inspect_screens` | Read | Low | https://policylayer.com/tools/0click-insta/inspect-screens.md |
| `like` | Read | Low | https://policylayer.com/tools/0click-insta/like.md |
| `notifications` | Read | Low | https://policylayer.com/tools/0click-insta/notifications.md |
| `page_reload` | Read | Low | https://policylayer.com/tools/0click-insta/page-reload.md |
| `pane_command` | Read | Low | https://policylayer.com/tools/0click-insta/pane-command.md |
| `profile` | Read | Low | https://policylayer.com/tools/0click-insta/profile.md |
| `status` | Read | Low | https://policylayer.com/tools/0click-insta/status.md |
| `story_view` | Read | Low | https://policylayer.com/tools/0click-insta/story-view.md |
| `ui_guide` | Read | Low | https://policylayer.com/tools/0click-insta/ui-guide.md |
| `unfollow` | Read | Low | https://policylayer.com/tools/0click-insta/unfollow.md |
| `captcha_click` | Write | Medium | https://policylayer.com/tools/0click-insta/captcha-click.md |
| `comment` | Write | Medium | https://policylayer.com/tools/0click-insta/comment.md |
| `device_create` | Write | Medium | https://policylayer.com/tools/0click-insta/device-create.md |
| `dm_send` | Write | Medium | https://policylayer.com/tools/0click-insta/dm-send.md |
| `edit_post` | Write | Medium | https://policylayer.com/tools/0click-insta/edit-post.md |
| `login` | Write | Medium | https://policylayer.com/tools/0click-insta/login.md |
| `post` | Write | Medium | https://policylayer.com/tools/0click-insta/post.md |
| `proxy_set` | Write | Medium | https://policylayer.com/tools/0click-insta/proxy-set.md |
| `register` | Write | Medium | https://policylayer.com/tools/0click-insta/register.md |
| `register_verify` | Write | Medium | https://policylayer.com/tools/0click-insta/register-verify.md |
| `save` | Write | Medium | https://policylayer.com/tools/0click-insta/save.md |
| `stealth_apply` | Write | Medium | https://policylayer.com/tools/0click-insta/stealth-apply.md |
| `story_upload` | Write | Medium | https://policylayer.com/tools/0click-insta/story-upload.md |

## Tool descriptions

- `challenge_solve` — Clear a wall: wait out Cloudflare/Turnstile, or solve recaptcha/hcaptcha through IG_CAPTCHA_PROVIDER
- `delete_post` — Delete one of this account
- `device_delete` — Delete a device directory (cookies, profile, history). Needs confirm:true
- `logout` — Clear this device
- `unlike` — Remove a like (idempotent)
- `unsave` — Remove a saved post (idempotent)
- `device_start` — Open the device browser in a terminal pane (spawns a Tern split when running inside Tern) and apply the anti-detection profile
- `device_stop` — Close the device
- `eval_page` — Run JavaScript in the device page (use it to repair selectors)
- `unfollow_bulk` — Unfollow only the accounts that do NOT follow back. Dry run unless confirm:true; limit caps the batch
- `unfollow_selected` — Unfollow exactly the handles you name: searches the following list, presses the row button, confirms. Dry run unless confirm:true
- `captcha_state` — reCAPTCHA Enterprise widget state of the device page (checkbox, image challenge, sitekey), read from Instagram
- `challenge_probe_text` — Raw text of the current page (debug helper for challenges)
- `challenge_status` — Detect Cloudflare / captcha / Instagram checkpoint on the device page
- `device_list` — List devices with their live browser key, handle and pane state
- `dm_list` — List direct-message threads
- `feed` — Read post links from the home feed
- `follow` — Follow a username (idempotent)
- `follow_status` — Authoritative per-account check: does this handle follow you back (followed_by) and do you follow it
- `followers_list` — Read the accounts following this device: scroll the dialog, or filter it with search
- `following_list` — Read the accounts this device follows: scroll the dialog, or filter it with search
- `inspect_screens` — Walk every mapped screen on any logged-in device and report which selectors are still alive (reusable across accounts)
- `like` — Like a post (idempotent)
- `notifications` — Read the notifications panel
- `page_reload` — Reload the device page
- `pane_command` — The exact shell command that starts this device
- `profile` — Read a profile: bio, counts, recent post links
- `status` — Session, handle, page and live challenge state for a device
- `story_view` — Open a user
- `ui_guide` — Selector map for every Instagram screen: static guide (verified or not) plus the live controls on the device
- `unfollow` — Unfollow a username (idempotent)
- `captcha_click` — Move a human-shaped cursor path (CSR-S → curve → target) inside the reCAPTCHA frame and click the checkbox
- `comment` — Comment on a post
- `device_create` — Create an isolated device: own terminal-browser daemon, own cookie jar, own profile dir
- `dm_send` — Send a direct message to a username
- `edit_post` — Rewrite the caption of an existing post
- `login` — Log in. Without username/password it waits for you to finish login (and 2FA/challenge) in the device pane
- `post` — Publish a photo, carousel or reel from local files
- `proxy_set` — Route this device
- `register` — Create an Instagram account through the web signup form (dry run unless submit:true)
- `register_verify` — Finish a signup with the confirmation code Instagram sent
- `save` — Save (bookmark) a post (idempotent)
- `stealth_apply` — Reinstall the anti-detection profile (webdriver flag, UA, plugins, WebGL, locale) on every page target
- `story_upload` — Upload a story when Instagram desktop exposes it (otherwise Unsupported, never a fake success)

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Apibase (1384 tools) — https://policylayer.com/tools/io-github-whiteknightonhorse-apibase.md
- Genesis (1127 tools) — https://policylayer.com/tools/onesi-genesis-mcp.md
- Delx Mcp A2a (1068 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- ScorpTech x402 API (1012 tools) — https://policylayer.com/tools/com-it-scorptech-x402.md
- MCP Framework Personal (912 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Hermoso (896 tools) — https://policylayer.com/tools/hermoso.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=0click-insta · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/0click-insta