MCP security, plans, and limits
Updated:
The short version: the assistant signs in as you, through OAuth, and can do what your ReelDrop account can do. It never sees your Instagram password, publishing still goes through the official Instagram API, and you can cut off access from your Claude settings at any time.
How access works
When you connect, your browser opens ReelDrop's own sign-in page and you approve the client. The assistant receives an OAuth token for your account; your password never passes through the assistant or the chat. Anything it schedules is published through the official Instagram API, exactly as if you had clicked schedule in the app.
What it can and cannot touch
The connection covers workspaces you belong to, and within them: scheduling, editing and cancelling posts, captions, analytics, and DM automations. It cannot connect or disconnect Instagram accounts, change your billing, delete your workspace, or reach anything outside your own account.
Revoking access
Remove the ReelDrop connector in your Claude settings, or run
claude mcp remove reeldropin Claude Code. Reconnecting always requires you to approve the sign-in in the browser again, so a removed client cannot quietly come back.Plans and metering
MCP access is included on Influencer and Creator. Starter can connect but gets an upgrade prompt from every tool. Nothing is double-billed through chat:
- Caption generations count against the same monthly allowance as the app (unlimited on Creator).
- Scheduling and posting stay unlimited on every plan, in chat as in the app.
- Plan rules are enforced on the server, so an assistant cannot talk its way past them.
Rate limits
Each tool has a burst limit per connected account (for example, scheduling calls are capped within a rolling ten-minute window). Normal use never touches these; they exist so a misbehaving client cannot hammer your account. On top of that, Instagram itself allows at most 50 API-published posts per account in any 24-hour window, which is a Meta rule, not ours.
Frequently asked questions
Does the assistant get my Instagram login?
No. It gets a ReelDrop OAuth token. Instagram access stays inside ReelDrop, which is a Meta Tech Provider publishing through the official API.
Can it spend money or change my plan?
No. Billing is not exposed over MCP. The closest it gets is telling a Starter user where the upgrade page is.
What happens to scheduled posts if I disconnect?
Nothing. Posts belong to your ReelDrop account, not to the connection. Everything already queued publishes as planned, and you can manage it in the app.
Is my content used to train AI models?
Not by ReelDrop. The MCP server reads and writes your account data to do the job you asked for. What your assistant does with the conversation is governed by its own provider's policy, so check that side too.
ReelDrop handles scheduling, AI carousels, captions, and DM automation in one place. Start free today.
Get started