instagram_list_media

What instagram_list_media does on ScopeGate

AI agents call instagram_list_media to retrieve information from ScopeGate without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why instagram_list_media is rated Low

This tool retrieves and displays media from an authenticated Instagram account without modifying, deleting, or executing external operations. It has minimal blast radius—an agent listing media cannot cause financial harm, delete data, or execute arbitrary code. Low severity is appropriate for unauthorized data access of social media content, though confidence is slightly moderated by the sparse description.

From the tool's definition Tool name 'instagram_list_media' and description 'List the authenticated Instagram account' indicate a query/retrieval operation. The verb 'list' and absence of modification language confirm this is a read operation.

The rule that runs instagram_list_media safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ScopeGate, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For instagram_list_media, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "instagram_list_media": {}
  }
}

Questions about instagram_list_media