Instagram DM automation: tools, rules, and the 24-hour window

Instagram DM automation uses Meta's official API on a professional account. The standard reply window is 24 hours after a user's message. Comment-to-DM allows one private reply within seven days, with Live replies limited to the broadcast. Human Agent extends human support to seven days from the user's message, not automated follow-ups.

What Instagram DM automation is allowed to do

With Instagram Login, you need an Instagram professional account (business or creator), an app with the instagram_business_basic and instagram_business_manage_messages permissions, and a user access token. Meta's Instagram Messaging API supports reading and replying to eligible DMs; serving accounts you do not own or manage requires Advanced Access. This is the route I use, but authorization does not exempt an account from Meta's messaging and spam rules.

Two constraints from the same docs, checked on September 16, 2026:

• Standard DM replies require the user to message your account first. A qualifying comment has a separate Private Replies route, described below; it is not permission to send an unsolicited campaign.
• Group threads are not supported. One to one only.

Text is capped at 1000 bytes UTF-8, images at 8 MB, audio, video and PDF at 25 MB. Message requests inactive for 30 days stop coming back from the API.

The 24-hour window, in one table

The Send Messages guide, Private Replies guide and the Human Agent description set these timers. Checked September 16, 2026:

Two details people miss. Human Agent is for a person handling support, not for a bot on a timer; its seven days start at the user's message, not after the first 24 hours. Private Replies permits one initial message per comment, so coordinate overlapping automations instead of assuming a second workflow will be suppressed. With Instagram Login, that private-reply route requires instagram_business_basic and instagram_business_manage_comments, separately from the permissions for an ordinary DM reply.

That single-message limit is the whole design constraint of comment-to-DM. You get one shot, so it has to carry the link and the reason to reply.

DM automation instagram: the four things worth automating

The list of what actually pays:

1. Comment to DM. A keyword in a comment triggers a private message with the link. It converts because the person asked.
2. Story reply follow-ups. A story reply lands in your DMs and opens a 24-hour window. A one-step sequence inside that window costs nothing and doubles replies.
3. Triage. Not answering, sorting. Tag every DM containing a price question, surface unanswered threads older than four hours.
4. The first reply. An instant acknowledgment, then a human. This is the one your audience notices most, and the one most often done badly.

What I do not automate: anything pretending to be me in a real conversation.

Instagram DM automation tools compared

USD prices before tax, checked September 16, 2026. Annual equivalents require payment for the year. Tool names link to the pricing sources; check feature eligibility separately from the entry price.

ManyChat is the default answer to this question. I rechecked its official prices on September 16, 2026: Free is $0 for 25 monthly Active Contacts; Essential is $17 a month for 250, or $14 a month equivalent with $168 billed yearly; Pro is $39 a month for 2,500, or $29 a month equivalent with $348 billed yearly. Pro includes AI and API access. Paid plans add contact overages, so a viral reel can move your bill once you exceed the allowance.

Those are USD web-subscription prices before tax. The March 2, 2026 pricing model varies by region, with older paid accounts migrating country by country. Check the offer in your account. The full numbers are in ManyChat pricing, and the rest of the field is in ManyChat alternatives.

The meter matters more than the entry price. ManyChat's Active Contacts count monthly messaging activity, not all followers or inactive stored contacts. Compare that allowance with each alternative's users, subscribers and usage limits. Per-account subscriptions keep the account charge stable at a fixed account count, but separate platform charges may still apply.

Where the others are better: Chatfuel and ManyChat have visual flow builders that a non-developer can use on a Sunday afternoon, and PlugKit has none. If you want to draw a decision tree with boxes and arrows, do not buy an API.

Instagram Graph API business account DM automation, without writing the OAuth part

The Meta path is real work: app review, permissions, token refresh, webhook verification, then a different implementation for every other platform you touch. What an aggregator sells you is skipping that.

Here is a comment-to-DM automation created through the PlugKit API, which handles the Meta side:

curl -X POST https://api.plugkit.co/v1/comment-automations \
  -H "Authorization: Bearer sk_..." \
  -H "Content-Type: application/json" \
  -d '{
    "accountId": "acc_123",
    "name": "Guide lead magnet",
    "keywords": ["guide", "link"],
    "matchType": "contains",
    "dmText": "Here is the guide I mentioned in the reel.",
    "dmButtonLabel": "Get the guide",
    "dmButtonUrl": "https://www.plugkit.co/",
    "publicReplyText": "Sent, check your DMs.",
    "oncePerUser": true
  }'

Keyword matching is case and accent insensitive. mediaIds left empty watches every post on the account. oncePerUser defaults to true, which is what you want: one person, one DM, whatever they comment.

Replying inside an existing conversation is POST /v1/inbox/conversations/{id}/messages with a text field. Standard Instagram DM replies must stay inside the 24-hour window. Other channels have their own exceptions, such as approved WhatsApp templates; they do not grant permission for an automated Instagram follow-up. Same endpoint, different platform rule, which is the part an aggregator earns its money on.

Why your link belongs in a button

I prefer a labelled button for the promised link: the destination is easier to understand at a glance. Meta's Send Messages guide also accepts text containing links, so a bare URL is not automatically disallowed. A button does not exempt a message from recipient eligibility or spam rules.

The rest of the flag surface is covered in Instagram automation in 2026: what Meta allows, what gets you flagged, including how to read a restriction notice without guessing its cause.

Letting an agent handle the inbox

The tools above run rules you write in advance. An agent reads the thread and decides. Since early 2026 that is a practical option: connect an MCP server to Claude, Cursor or Hermes, and the model gets list_conversations, send_message and reply_to_comment as tools. The setup takes one command, claude mcp add -t http plugkit https://api.plugkit.co/mcp, and I wrote the full walk-through in the Hermes Agent setup guide.

My rule with an agent on the inbox: read-only for a week. Let it draft and summarize, keep the send button on the human side, then hand it writing rights on one account. The 24-hour window is unforgiving of a bad first message and there is no undo on a sent DM.

More on where each platform's API stands, and what an agent can do with it, on the Instagram automation hub.

What this costs

Meta Business Suite is included with your account; check its available Instagram inbox automations before paying for a separate tool. Beyond that, you are paying for the API layer. PlugKit is $49 a month for 5 connected accounts, cancel anytime, with the unified inbox, comment-to-DM automations, eligible broadcasts, sequences, analytics, webhooks and the MCP server on every plan, or $97 a month for 30 accounts on Pro. Additional Pro accounts cost $3 each for accounts 31 through 100 and $1.50 each from 101. The billing guide lists separate X charges: $0.005 per standard post read, $0.015 per ordinary publication and $0.200 per publication containing a URL.

FAQ

Is Instagram DM automation against the rules?

Meta supports eligible DM automation through its official API with a professional account, the required permissions and compliance with messaging and content rules. Standard replies follow a user message; a qualifying comment permits the separate private-reply flow. Using an approved API does not guarantee that an account cannot be restricted.

How do I automate Instagram DMs for free?

Start with the Instagram automations available in Meta Business Suite's Inbox. Its automated-responses guide covers several channels, so check the Instagram trigger and limits rather than assuming every listed option applies. ManyChat Free, checked September 16, 2026, adds comment-to-DM for up to 25 Active Contacts a month, with up to 4 live automations and ManyChat branding. Free supports Instagram plus one of TikTok, Facebook Messenger or Telegram, but not WhatsApp, SMS or Email.

What is the 24-hour rule on Instagram DMs?

The standard reply window lasts 24 hours after the person's last message; content rules still apply. Human Agent permits eligible human support for up to seven days from that message, without extending automated follow-ups. A qualifying comment separately allows one private reply within seven days; Live replies must be sent during the broadcast.

Can I send an automated DM to someone who commented?

Yes, one private reply within seven days of a qualifying comment; for Live comments, send it while the broadcast is still live. Further messages require the recipient to respond and must stay within 24 hours of that response. That first message is why I keep the promised link and a clear reason to reply together.

Do I need a business account for Instagram DM automation?

Yes. A professional account, business or creator, is required by the Instagram API with Instagram Login, along with an app holding instagram_business_basic and instagram_business_manage_messages. Personal accounts have no messaging API at all.

AB

Antoine BlancoFounder of PlugKit. Runs his own Instagram, YouTube and X accounts through the API and MCP server described here.