InstagramUpdated 28 September 2026
What Meta allows an app to do in your Instagram DMs, the 24-hour and 7-day windows, why your account needs to be a professional account, what App Review means for the tools you choose, and a setup that keeps you inside the lines.
Instagram DMs are where a lot of brands actually sell: the post gets attention, the DM closes it. That also makes the DM inbox the place where messages pile up unanswered. Automating it is sensible; automating it with a tool that ignores Meta's rules gets accounts restricted. Here is what is allowed, what isn't, and how to set it up so a bot and your team share the inbox without trouble.
What Meta allows
Instagram's messaging API is part of the Messenger Platform. Through it, an app you authorise can:
- Receive the DMs sent to your professional account, in real time, including replies to your stories.
- Send replies in an open conversation.
- Read the sender's public profile (name, username, picture) to label the conversation.
- Mark messages as seen and show typing indicators.
It cannot start a conversation with someone who has never messaged you, cannot read DMs of accounts you don't own, and cannot scrape follower lists. Anything a tool promises beyond that — "DM everyone who liked the post", "message your competitors' followers" — is outside the API, usually done by driving a logged-in browser or phone, and is the behaviour that gets accounts flagged for automation.
The two windows
24 hours for automated replies. From the moment the customer sends a message, an app — including an AI assistant — may reply for 24 hours. Each new message from the customer restarts the clock.
7 days for a human. After the 24 hours, a person replying through the app may still answer for up to 7 days, under Meta's human-agent rule. This is meant for real support cases that take more than a day; the tool must mark those messages as sent by a human, and a bot must not use it.
After 7 days, the thread is closed to you until the customer writes again. There are no paid templates on Instagram the way there are on WhatsApp.
Your account has to be a professional account
The API only works with Instagram professional accounts — Business or Creator — and the account should be linked to a Facebook Page (the link is how Meta ties the account to your business). Personal accounts can't be connected. Switching is free and takes a minute in Instagram's settings; you keep your followers and posts.
You also have to allow messaging access: Instagram → Settings → Messages and story replies → Connected tools → Allow access to messages. Without it, a connected app receives nothing, which is the first thing to check when a tool "doesn't get messages".
App Review, and what it says about the tool you choose
Any app that reads and sends DMs for accounts it doesn't own has to pass Meta's App Review: Meta watches a screencast of the feature, checks the permissions requested, and grants access. Until an app is approved, it can only work for accounts belonging to its own developers and testers.
For you, that means two questions for any Instagram tool:
- Is it connected through Instagram Login (the official flow)? If it asks for your Instagram password, walk away — that is the browser-automation route.
- Has it been through App Review for messaging? An honest vendor will say where they are. (doTask's Instagram messaging permissions are going through App Review as we write this; until they are approved, Instagram works for workspaces we enable as testers — ask us.)
A setup that stays inside the lines
One inbox, the window enforced. The inbox should know the 24-hour rule and behave accordingly: replies go out inside 24 hours of the customer's last message, and after that the thread waits for the customer. Meta's Human Agent feature can let a person on the team reply for up to 7 days, but only for apps Meta has approved for it. doTask enforces the window per thread.
The assistant answers from your own material. Product questions from the catalogue, policy questions from the pages, hours and locations from a Q&A. It cites the source and says when it doesn't know. Inventing answers in DMs is the fastest way to a public complaint.
A reply from the Instagram app hands the thread to you. If someone on the team replies from their phone in the Instagram app, the bot should notice (Meta sends an "echo" of the message) and go quiet on that thread. Two people — one human, one bot — talking over each other looks broken.
Story replies go to the same place. They arrive as DMs, and they are usually the warmest leads.
Comments are a separate permission. Replying to comments, or DMing someone because they commented, is a different API with its own review. Tools that "DM everyone who comments a keyword" do use an official API — but check they were reviewed for it, and remember the 24-hour rule still starts from the customer's message, not the comment.
What you can and can't automate, in one table
| Want to… | Allowed through the API? |
|---|---|
| Reply instantly to a new DM with an AI answer | Yes, inside 24 hours |
| Have a person reply to a 3-day-old DM | Only with Meta's Human Agent feature, which the app must be approved for |
| Send a promotion to everyone who DMed you last month | No |
| DM a new follower a welcome message | No (they haven't messaged you) |
| Auto-reply to story replies | Yes, inside 24 hours |
| DM people who commented a keyword | Yes, through the comments API, if the tool has that permission |
| Message your competitor's followers | No, and it risks the account |
Frequently asked
Will customers know a bot answered? They will if you tell them, and you should — a first line like "I'm the doTask assistant for [brand]; a person can take over any time" sets expectations and is how the good accounts do it.
Can the same assistant answer on WhatsApp and web chat? Yes — that is the point of a shared inbox. Same knowledge, same rules, one thread per customer per channel.
What about multiple Instagram accounts? Each professional account connects separately, and each is its own channel in the inbox.
How do I connect Instagram to doTask? Settings → Instagram → Connect, signed in with the professional account; the steps are in Connecting Instagram. The doTask Chatbot page shows the inbox and the AI Agent, and how it compares with ManyChat covers the Instagram-first alternative.
