How to Automate Instagram DM Replies: 2026 Setup

Quick answer: Use an Instagram professional account, turn on Allow Access to Messages, and connect a tool or Meta app with messaging permission and webhooks. Automated replies run for 24 hours after a customer’s last message (up to 7 days after a Click-to-Instagram-Direct ad); humans get 7 days with the human_agent tag. Each comment allows one private reply.

If you are asking “how do I automate my Instagram DMs” or “how do I set up automated Instagram DMs from comments”, the setup is shorter than WhatsApp’s, because Instagram has no phone number to register and no message templates to approve. The hard part sits elsewhere: Meta only lets you reply, never cold-message, and the clock that governs every reply starts with the customer. Everything below comes from Meta’s own developer documentation and policies, read on 14 October 2026, and covers Instagram professional accounts, Business Login for Instagram, Facebook Login for Business, Meta App Review, webhooks, the Send API, Private Replies, Conversation Routing and Meta Business Agent.

Two ways to connect: Instagram Login or a Facebook Page

Meta now runs two separate Instagram API configurations, and the first decision is which one your tool uses. Meta’s Instagram Platform overview, updated 28 September 2026, says the Instagram API with Instagram Login “serves Instagram professional accounts without requiring a linked Facebook Page”, while the Instagram API with Facebook Login “serves Instagram professional accounts linked to a Facebook Page”, with messaging “supported through Messenger Platform”.

What differs	Instagram Login route	Facebook Login route (Messenger API for Instagram)
Facebook Page	Not required	Required, linked to the Instagram account
Who logs in	Instagram credentials, Business Login for Instagram	Facebook credentials, Facebook Login for Business
Messaging permissions	instagram_business_basic, instagram_business_manage_messages	instagram_basic, instagram_manage_messages, pages_manage_metadata (plus Page permissions)
API host	graph.instagram.com	graph.facebook.com
Send API rate limit, text, links, reactions, stickers	100 calls per second per professional account	300 calls per second per professional account
Send API rate limit, audio or video	10 calls per second	10 calls per second

Most operators never write this code: they log in to a reviewed tool that picks the route. The table still tells you whether you need a Facebook Page. One rule to remember: an Instagram DM automation without a linked Facebook Page has to run on the Instagram Login route.

How to automate Instagram DM replies: the critical path

This is the Instagram DM automation critical path: every step in order, what it depends on, who has to say yes, and the limit or blocker Meta publishes for it. Steps 1 to 3 are yours alone. Step 4 is where any waiting happens.

Step	Prerequisite	Who approves	Meta-stated limit or blocker
1. Switch to a professional account	An Instagram account you control	You, in the Instagram app	The APIs only serve Instagram professional accounts, business or creator
2. Link a Facebook Page (Facebook Login route only)	A Page where you can perform admin-equivalent tasks	You, as Page admin	The Messenger API getting-started guide asks for a Developer account with at least the MODERATE task on that Page
3. Allow access to messages	Professional account	You, in Instagram settings	Meta says accounts “will need to enable the connected tools toggle” (Message controls, Connected Tools, Allow Access to Messages)
4a. Use a tool that is a Tech Provider	The tool’s app already holds Advanced Access	Meta reviewed the tool; you grant permissions at login	A Tech Provider serving multiple businesses needs App Review for Advanced Access
4b. Or build your own Meta app	Meta developer account; a Business-type app with the Instagram product	Meta, for publishing the app and for Advanced Access	A developer can hold roles on at most 15 apps not connected to a verified business; Business Verification before you publish; Advanced Access needs App Review and Business Verification
5. Grant messaging permissions	Login flow, or tokens from the App Dashboard for your own account	The account owner	Short-lived token valid for 1 hour; long-lived token valid for 60 days and refreshable
6. Subscribe webhooks	A public HTTPS callback URL and a verify token	Meta verifies the endpoint	Default Instagram subscriptions include messages, comments, live_comments and messaging_postbacks
7. Build the human escalation path	A custom inbox, or Conversation Routing to the Instagram Inbox or another app	Meta, during App Review	Meta says Instagram Messaging apps “must have an escalation path to a human agent”
8. Write the automated-experience disclosure	Your opening message and hand-back message	You, against the law where your customers are	Disclosure required “when required by applicable law”; Meta singles out California and Germany
9. Go live inside the window	A customer message, comment or ad click	The customer starts it	24 hours for most replies; private replies once per comment within 7 days

Your first action on day one is steps 1 and 3: both are free, both live on your phone, and both block everything after them. Your finish state is a test DM from a second account that gets an automated answer, a human takeover, and a disclosure line, all in the same thread.

Step 1: switch to a professional account

Meta’s overview is plain: “To use the APIs, your app users must have an Instagram professional account”, and that account “can represent a business or creator”. A personal account cannot be automated through Meta’s APIs at all. Meta’s Messenger API overview adds a creator-specific catch: a creator account “must send an API request using the Instagram Conversations API before the account can receive webhooks”, so creators should expect one extra call during setup.

Step 2: link a Facebook Page, only if your route needs it

On the Facebook Login route, the Page is not decoration. Meta’s getting-started guide for Messenger API support for Instagram lists four things you need before you start: an Instagram professional account, a Facebook Page connected to it, a Meta Developer account that can perform the MODERATE task on that Page, and a Meta app with the Facebook Login use case. Meta’s Developer Policies add an Instagram-specific duty for anyone linking the two: before linking, ensure the account owner “acknowledges and agrees that all users with a Page role of moderator or higher will have the ability to view and respond to messages”. If several people help run your Page, every one of them at moderator level can read your DMs once the link exists.

Step 3: allow access to messages

This toggle is easy to miss, and without it a correctly built integration can receive nothing. Meta’s getting-started guide says Instagram professional accounts “will need to enable the connected tools toggle under message controls settings”, found under Instagram Settings, Messages and story replies, Message controls, Connected Tools, Allow Access to Messages. The guide is written for the Facebook Login route; turning the toggle on costs nothing on either route.

Step 4: use a reviewed tool, or build and review your own app

Meta’s App Review page for the Instagram API sets out the split. If your app is “only for a business I own or manage”, the access level is Standard Access and App Review is “Not required”. If you are a Tech Provider whose app “serves multiple businesses”, you need Advanced Access and App Review is “Required”. Advanced Access also requires Business Verification, and Meta’s app-creation guide says you must connect a business that has completed Business Verification “before you can publish your app”.

Here is the sentence that weakens the do-it-yourself route, and you should weigh it: Meta’s own overview warns that “some features might not work properly until your app has been granted Advanced Access”, and the Messenger API for Instagram overview states that “Apps with Standard Access can only interact with people who have a role on the app”. Meta files that second line under “Testing limitations”, while the Instagram Platform overview says that if your app only serves your own account, “Standard Access is all your app needs”, so the two pages pull in different directions. Plan for App Review even when the only account is your own, unless your testing shows real customers receive replies.

Step 5: grant the messaging permissions

On the Instagram Login route the two permissions are instagram_business_basic and instagram_business_manage_messages; Meta’s app-creation guide says that when you request instagram_business_manage_messages, “the Human Agent feature is added automatically”. On the Facebook Login route Meta’s getting-started guide asks for instagram_basic, instagram_manage_messages and pages_manage_metadata. Tokens expire: the short-lived token from the login flow is valid for one hour, and the long-lived token is valid for 60 days and can be refreshed before it expires.

Step 6: subscribe the webhooks

Every inbound DM reaches your system as a webhook, so nothing is automated until Meta can verify your callback URL. Meta’s app-creation guide has you add a callback URL and a verify token, and says that by default you are subscribed to all Instagram webhooks, including comments, live_comments, messages, messaging_postbacks and messaging_seen. Note that Meta says conversations in the Requests folder “that have not been active for 30 days will not be returned in API calls”.

What is the 24-hour rule for Instagram DMs?

Instagram DM automation is reply-only. Meta’s messaging guide says “Only after an Instagram user has sent your app user’s Instagram professional account a message can your app send a message to the Instagram user”, and the Developer Policies say the standard messaging window “lasts 24 hours, except when the interaction is a person clicking on your Click-to-Messenger or Click-to-Instagram-Direct ad and then sending you a message; in this case it may last up to 7 days”. Inside the window, Meta’s policy page says messages “may contain promotional content”. Outside it, a new integration has one reply route as at 14 October 2026: a human reply under the Human Agent tag. Meta’s Marketing Messages feature can message opted-in people outside the window, but Meta closed it to new integrations on 1 September 2025 (see below).

A lead who messages at 9pm and hears nothing until the next afternoon is near the edge of the window, so treat Instagram replies like any other speed-to-lead problem for AI agents.

The window-and-tag table

Use this table as the decision rule in your automation. The left column is time since the customer’s last action, not time since your last reply.

Time since the customer’s last message or action	What an automated reply may send	What a human reply may send	Meta’s source
0 to 24 hours after a DM, story reply or other message	Anything permitted by policy, promotional content included	Anything permitted by policy	Developer Policies; Messenger and IG Messaging API policy
Up to 7 days after a first message sent from a Click-to-Instagram-Direct ad	Standard window may still be open	Standard window may still be open	Developer Policies; Instagram Platform overview
24 hours to 7 days after a DM	Nothing on a new integration; the standard window is closed (Marketing Messages to opted-in people is limited to existing partners)	A reply tagged human_agent, for support the standard window could not resolve; no promotional content under a tag	Instagram Platform overview (Human Agent feature); Developer Policies
More than 7 days after the last DM	Nothing on a new integration until the customer writes again; Marketing Messages to opted-in people has been limited to existing partners since 1 September 2025	Nothing on the routes we could read, until the customer writes again	Instagram Platform overview; policy page (One-time Notification and Sponsored Messages “not available for IG Messaging API”); Marketing Messages page
Within 7 days of a comment on a post, reel or ad post (no DM yet)	One private reply, which carries a link to the post	One private reply	Private Replies guides
During an Instagram Live, for a Live comment	One private reply, only while the broadcast is live	One private reply, only while live	Private Replies guides
Commenter replies to your private reply	A normal 24-hour window opens from their reply	Same, then the Human Agent window	Private Replies guides

Two limits on that table deserve a line each. Meta’s Human Agent feature description says the allowed usage is “to provide human agent support in cases where a user’s issue cannot be resolved in the standard messaging window”, with examples such as a business closed for the weekend; an AI-written follow-up sent under the tag is outside that usage. And Meta’s Developer Policies say promotional content outside the window belongs in the Marketing Messages API, never in a message tag. Meta’s Marketing Messages page (also known as Recurring Notifications) says the feature “allows a Facebook Page or Instagram Professional Account to send messages outside the standard messaging window for people who have given you permission to do so”. The same page says that from 1 September 2025 access “will be limited to existing Partners and end-clients. No new integrations will be allowed”, and that the Messenger version is deprecated from 10 February 2026. For a setup started today, plan on the 24-hour window and the human_agent tag, and if a tool offers Instagram marketing messages, ask whether it is an existing Marketing Messages partner.

How to automate Instagram comments to DM

Comment-to-DM is Meta’s Private Replies feature, and it is narrower than many automation tools imply. Meta’s Private Replies guide for the Instagram Login route lists four limitations: “Only one message can be sent to the commenter”; it must be sent within 7 days of the comment; for Instagram Live, private replies can only be sent during the broadcast; and “Follow-up messages can only be sent if the recipient responds, and must be sent within 24 hours of the response”. The reply lands in the commenter’s Inbox if they follow you, or their Requests folder if they do not, and it carries a link to the post they commented on.

The permissions differ by route. On the Instagram Login route you need instagram_business_basic and instagram_business_manage_comments with the comments and live_comments webhooks. On the Facebook Login route, Meta’s Messenger API guide asks for instagram_manage_comments and pages_messaging, a Page access token from someone who can perform the MESSAGING task, the Human Agent feature and Advanced Access. Rate limits apply per professional account: 750 private-reply calls per hour for comments on posts and reels, and 100 calls per second for Live comments.

Make the single private reply a question, not a brochure, such as “Want the price list for your suburb? Reply with your postcode.” Their reply opens the 24-hour window and your automation takes over.

Run Instagram DMs on the same agent as your calls and texts. Zian’s AI agents run Instagram DM and Facebook Messenger conversations alongside voice calls, SMS, email and WhatsApp, and book appointments from inbound and outbound conversations. Zian is in partnership-application beta.

Apply For Partnership

Does Instagram require a bot disclosure?

Meta’s rule is conditional, and it has three trigger points. Meta’s Messenger Platform and IG Messaging API policy says: “When required by applicable law, automated chat experiences must disclose that a person is interacting with an automated service: at the beginning of any conversation or message thread, after a significant lapse of time, or when a chat moves from human interaction to automated experience.” It says experiences serving California or German users “should pay special attention to this requirement”, and gives sample wording such as “You are interacting with an automated experience”. Then comes the line that should settle the design for most businesses: “Even where not legally required, we recommend informing users when they’re interacting with an automated chat as best practice.”

So build the disclosure into three places: the first automated message in a thread, the first automated message after a long gap, and the message that hands a conversation back from a person to the AI. A single sentence covers all three, for example “You’re chatting with our AI assistant; type ‘person’ any time to reach the team.”

Two further duties in Meta’s Developer Policies apply to every Instagram DM automation. You must not contact people in Instagram Messaging without “legally sufficient consent, permission, and/or opt-in” under applicable law, and you must “immediately respect all requests” to block, discontinue or opt out. And an experience that receives “excessive negative feedback” may be “feature limited, paused, rate-limited or removed from Platform”.

Instagram DM automation rate limits

Meta’s rate-limiting page sets Instagram messaging limits per professional account and per API, separately from the rest of the Instagram Platform. On the Instagram Login route, the Send API allows 100 calls per second for text, links, reactions and stickers and 10 per second for audio or video; on the Messenger API for Instagram, the text figure is 300 per second. The Conversations API, used to read threads, allows 2 calls per second on both routes. The Messenger API for Instagram section adds that “Your app may be rate limited if too many messages are being sent to a single thread”, which is the limit an over-eager AI that sends three messages per customer turn will hit first.

How to hand an Instagram DM to a human

Meta treats the human path as a requirement, not a feature. Its Instagram Messaging overview says apps “must have an escalation path to a human agent”, and that experiences “can start from an automation to qualify intent but must have a way for users to chat with a human agent as needed”. Meta’s human-agent escalation guide gives two ways to do it: a custom inbox powered by the same app as the automation, or Conversation Routing, which passes thread control to the Instagram Inbox or to another app. For App Review, Meta says you should demonstrate that when escalation happens, “the thread ownership is successfully transferred to the inbox and the agent is able to use the inbox to reply to users”.

Older Meta pages still describe the Handover Protocol for this. Meta’s Conversation Routing page says “Meta no longer supports the Handover Protocol for Instagram” and that all businesses have been migrated to Conversation Routing, which is backwards compatible with most Handover Protocol calls. When a conversation starts from an Instagram ad, the designated app keeps thread control for 1 day from the last user message by default, extendable to 30 days.

What travels with the conversation (qualifying answers, booking state, the reason for escalation) is covered in our guide to AI-to-human handoff and context transfer. Add one rule for the 24-hour edge: if the AI cannot finish before the window closes, escalate early, because only a human can use the 7-day Human Agent window.

Which tool should run your Instagram DM replies?

This page is about setup, so the table below is a short list, not a ranking. Zian publishes this page and appears first in the table. The other entries are described only from their own published pages.

Option	What it is	Best for	Source
Zian AI	AI sales and reception agents platform that runs Instagram DM and Facebook Messenger conversations alongside voice calls, SMS, email and WhatsApp, with appointment booking and CRM integrations (HubSpot, Salesforce, HighLevel, Zapier); in partnership-application beta, no public price	Teams that want one agent qualifying and booking across Instagram, Messenger, calls, SMS, email and WhatsApp	zian.ai
LeadsNow.ai	Done-for-you AI appointment setting and lead generation service, pay-per-result, running on Zian; 50,769+ appointments; leads answered in under 60 seconds, 24/7	Businesses that want the outcome without running the setup	leadsnow.ai
Meta Business Agent	Meta’s own AI agent; Meta says it can answer business questions, recommend products from a catalogue, book appointments, qualify incoming leads, let you decide when a team member steps in and close sales; expansion to Instagram announced on 3 June 2026, free to get started, with paid subscriptions to follow	Businesses that want Meta’s native agent inside Meta’s apps	Meta Newsroom
Your own Meta app	Direct build on the Instagram API, following the critical path above	Teams with a developer, a webhook server and time for App Review	Meta for Developers

On Meta Business Agent pricing, Meta’s 15 September 2026 Meta One announcement lists business bundles “starting at $14.99/mo” for the Essential plan, which includes “more access to Meta Business Agent on WhatsApp”, with higher tiers adding more Business Agent responses; Meta says plans, pricing and availability “may vary by region, by app, and by account”. Meta also says the agent’s morning-briefing and insights role is starting “with a select number of businesses”.

The do-it-yourself arithmetic is worth doing honestly. A direct build means a public webhook server, a token refresh job every 60 days at most, a human inbox that can take thread control, a disclosure line, an opt-out handler, App Review if anyone outside your app’s roles must receive replies, and a rule engine for the window-and-tag table. A small business replying to a few DMs a day can stay on Instagram’s own inbox and a reviewed tool. A team taking enough DMs that replies routinely slip past 24 hours, or one that wants each DM turned into a booked appointment without a person in the loop, is the case for an agent that already handles the plumbing. If you are setting up WhatsApp at the same time, our guide on how to apply for WhatsApp Business API access covers that channel’s very different gates.

Frequently asked questions

How do I automate Instagram DM replies?

Switch to an Instagram professional account, turn on Allow Access to Messages under Connected Tools, then connect a tool or your own Meta app that holds the instagram_business_manage_messages permission (or instagram_manage_messages through a linked Facebook Page) and subscribes to the messages webhook. Automated replies can only answer a customer who messaged you, within 24 hours of their last message in most cases.

Can I send an automated Instagram DM after 24 hours?

Not on a new integration, as at 14 October 2026. After 24 hours a reply has to come from a human, using the human_agent tag within 7 days of the customer’s message, and only for support that could not be finished in time. Meta’s Marketing Messages feature can reach people who opted in, but Meta closed it to new integrations on 1 September 2025. The exception is a conversation started from a Click-to-Instagram-Direct ad, where Meta says the standard window may last up to 7 days.

How do I automate Instagram comments to DM?

Use Meta’s Private Replies feature: when the comments webhook fires, send one message to the commenter using the comment ID. Meta allows only one private reply per comment, within 7 days of the comment, or only during the broadcast for Instagram Live comments. You can continue only if they reply, and then within 24 hours of their response.

Do I need a Facebook Page to automate Instagram DMs?

No. Meta’s Instagram API with Instagram Login serves professional accounts without a linked Facebook Page. The older Facebook Login route, which runs messaging through the Messenger Platform, does require a Page linked to the Instagram account, and every Page user at moderator level or above can then view and respond to the DMs.

Does Instagram require me to say replies come from a bot?

Meta requires a disclosure when applicable law requires one: at the start of a thread, after a significant lapse of time, and when a chat moves from a human back to automation. Meta’s Messenger Platform and IG Messaging API policy names California and German users and recommends disclosure even where it is not legally required.

What are the rate limits for Instagram DM automation?

Per Instagram professional account, the Send API allows 100 calls a second for text, links, reactions and stickers on the Instagram Login route (300 on the Messenger API for Instagram) and 10 a second for audio or video. Private replies are capped at 750 calls an hour for posts and reels, and the Conversations API at 2 calls a second.

One agent for Instagram, calls, SMS and WhatsApp. Zian answers inbound calls 24/7 as an AI receptionist, runs Instagram DM and Facebook Messenger conversations, and books appointments in 30+ languages. Zian is in partnership-application beta.