MCP server — use DMKaro from Claude, ChatGPT & AI agents

01What is the MCP server

MCP (Model Context Protocol) is the open standard AI assistants use to work with other apps. DMKaro's remote MCP server gives Claude, ChatGPT, Claude Code, Cursor, VS Code, Windsurf, Gemini CLI and other MCP clients 12 tools for your account: read your accounts, posts, automations, analytics and leads, and create, edit, pause or delete automations.

Server URL: https://dmkaro.com/mcp
Sign-in: One-click OAuth (Claude, ChatGPT, Claude Code) or a personal API key (Cursor, VS Code, Windsurf, scripts).
Plans: Included in Pro and Business.
Works with: Instagram professional accounts and Facebook Pages connected to your account.

02What you can ask

“On my latest Reel, DM the product link to everyone who comments LINK, and reply “Check your DM 📩” under the comment.”
“How many DMs, clicks and new followers did I get this week compared with last week?”
“Which automations are getting comments but no clicks? Suggest better DM text.”
“Pause every automation on Reels older than 30 days.”
“List the leads who shared an email this month as a table.”
“Why did the last few DMs fail?”

Real people receive the DMs your automations send. Good AI apps ask before they create or delete something — read what they plan to do before you confirm.

03Before you start

1Be on the Pro or Business plan.
2Connect at least one Instagram account or Facebook Page in DMKaro.
3Verify your mobile number once (we ask before your first automation), so AI apps can create automations too.

04Connect your AI app

Pick your app. Apps with a “Connect” button sign in with OAuth — you log in to DMKaro, choose permissions and press Allow. No key to copy.

How it connects: Sign in (OAuth)

1Open Claude → Settings → Connectors → Add custom connector.
2Name: DMKaro. Remote MCP server URL:
```
https://dmkaro.com/mcp
```
3Click Add, then Connect. Log in to DMKaro, choose what Claude may do and press Allow.
4In a chat, turn DMKaro on from the tools menu and ask: “Show my automations and how they did this week.”

05API keys

For apps without OAuth sign-in, create a personal API key and send it as Authorization: Bearer <key>.

1Open Dashboard → AI & MCP → New key.
2Name it, choose Write and Contacts access, and an expiry (30 days, 90 days, 1 year or never).
3Copy the key — it's shown only once. It starts with dmk_live_.
4Paste it into your app's MCP settings (see the snippets above). Revoke it any time; it stops working instantly.

An API key works only for the MCP server — it can't log in to the dashboard, change your password, billing or connected accounts. Up to 10 keys per account. We email you whenever a key is created.

06Tools reference

Read tools never change anything. Write tools are marked so AI apps ask you first; delete needs an explicit confirmation.

Tool	What it does	Needs
`get_account_overview`	Plan, this month's DM usage and limits, account and automation counts.e.g. “How many DMs do I have left this month?”	Read
`list_connected_accounts`	Connected Instagram accounts and Facebook Pages.e.g. “Which accounts are connected?”	Read
`list_posts`	Recent posts and Reels with ids, captions and whether they already have an automation.e.g. “Show my last 5 Reels.”	Read
`list_automations`	All automations with status, keywords and results.e.g. “Which automations are paused?”	Read
`get_automation`	Full settings and stats of one automation.e.g. “What does my PRICE automation send?”	Read
`get_analytics`	Comments, DMs, clicks, followers and leads for 7/30/90 days vs the period before.e.g. “Compare this week with last week.”	Read
`list_recent_activity`	Latest runs: who commented and whether the DM was sent, skipped or failed.e.g. “Why did the last DMs fail?”	Read
`list_contacts`	People your automations talked to, with emails/phones they shared.e.g. “List leads who shared an email this week.”	Contacts
`create_automation`	New comment-to-DM, story reply, DM keyword or Live automation.e.g. “On my latest Reel, DM the link to everyone who comments LINK.”	Write
`update_automation`	Change keywords, DM text, buttons, follow-to-unlock, lead capture or public replies.e.g. “Add the keyword PRICE and turn on follow-to-unlock.”	Write
`set_automation_status`	Pause or resume an automation.e.g. “Pause all automations on old Reels.”	Write
`delete_automation`	Delete an automation (asks for confirmation).e.g. “Delete the test automation.”	Write

07Permissions

You choose what each app or key may do. Untick what you don't want on the Allow screen.

Read: See your connected accounts, posts, automations and analytics. automations:read
Write: Create, edit, pause and delete automations. automations:write
Contacts: See the people your automations talked to, incl. emails and phones they shared. contacts:read

08Security & privacy

OAuth 2.1 with PKCE. Access tokens last 1 hour; refresh tokens rotate on every use, and a reused one ends the connection.
Keys and tokens are stored only as SHA-256 hashes — even we can't read them back.
Each account sees only its own data. Every change made through MCP is written to your account's audit log.
Your Instagram/Facebook access tokens never leave our servers and are never given to AI apps.
Rate limits protect your account: 120 requests and 30 changes per minute.
Text from comments, captions and names is marked as untrusted data, so AI apps don't follow instructions hidden in a comment.
Disconnect an app or revoke a key in Dashboard → AI & MCP and access ends immediately. Downgrading from Pro also stops MCP access.

09Technical details

Transport: Streamable HTTP, stateless: POST JSON-RPC 2.0 to the server URL, one JSON response per request (no session id, no SSE stream; GET returns 405).
Protocol versions: 2026-07-28 (stateless, server/discover) and 2025-11-25, 2025-06-18, 2025-03-26, 2024-11-05 (initialize handshake).
Auth: Bearer token. Unauthenticated requests get 401 with a WWW-Authenticate header pointing to the protected resource metadata.
OAuth discovery: https://dmkaro.com/.well-known/oauth-protected-resource/mcp and https://dmkaro.com/.well-known/oauth-authorization-server. Dynamic client registration, PKCE S256, public clients.
Tool results: JSON in structuredContent plus a text copy. Plan limits, validation and “not found” come back as isError results the AI can read and fix.
Limits: 120 requests/minute per token, 30 changes/minute per account, 256 KB request body.

Try it with curl

curl -s https://dmkaro.com/mcp \
  -H "Authorization: Bearer $DMKARO_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"get_account_overview","arguments":{}}}'

Test with MCP Inspector

npx @modelcontextprotocol/inspector

Choose “Streamable HTTP”, paste the server URL and either use OAuth or add the header Authorization: Bearer <key>.

10Troubleshooting

“Plan does not include MCP”: Upgrade to Pro or Business on Plan & billing, then connect again.
401 / “Invalid or expired token”: The key was revoked or expired, or the app was disconnected. Create a new key or reconnect the app.
“Not allowed to …”: The connection lacks that permission. Reconnect and keep Write or Contacts on, or create a key with that access.
“Verify your mobile number”: Open the dashboard once and verify your number; then AI apps can create automations.
Post not found: Ask the AI to call list_posts first, then use the id it returns.
Can't see the Connect button in ChatGPT: Custom connectors need Developer mode (Settings → Apps & Connectors → Advanced).

11FAQ

What is an MCP server?

MCP (Model Context Protocol) is an open standard that lets AI assistants use other apps safely. DMKaro's MCP server lets Claude, ChatGPT and other AI apps read your automations and analytics and create or change automations when you ask.

Which plans include MCP?

The MCP server and API keys are included in Pro and Business. They are not part of the Free plan.

Does it work with ChatGPT?

Yes. Add DMKaro as a custom connector in ChatGPT's Developer mode with the URL https://dmkaro.com/mcp and sign in with OAuth.

Does it work with Claude?

Yes. In Claude (web, desktop or mobile) go to Settings → Connectors → Add custom connector and paste https://dmkaro.com/mcp. Claude Code, Cursor, VS Code, Windsurf and Gemini CLI work too.

Can the AI see my Instagram password?

No. DMKaro never has your Instagram or Facebook password, and AI apps only get a DMKaro access token limited to the permissions you allowed. You can disconnect them any time.

Is there a REST API?

The supported way for developers and agents is the MCP server with an API key. It uses plain JSON-RPC over HTTPS, so any language can call it.

Connect your first AI app

Takes under a minute on Pro and Business.

Open AI & MCP

Run DMKaro from Claude, ChatGPT & any AI agent.