Read-only Instagram feeds · ig-hub.nebas.dev

Your Instagram posts, on your website — connected once, maintained automatically.

Your Instagram professional account connects a single time. Instagram Hub then securely stores and auto-refreshes your access token and serves your latest public posts to your sites. It never posts, never reads messages, never touches anything private.

Read-only access Tokens encrypted at rest Disconnect anytime
@northlight.studio
professional account
Connected
post image post image post image post image post image post image
token auto-refreshes in 41 days · last synced 6m ago
GET /feed/northlight-studio → your website
How connecting works

Three steps. Then it runs itself.

You receive your connect link

A personal, one-time connect link arrives from us — connecting is invitation-only. There's no sign-up, account, or password needed on your side.

Click it and approve on Instagram

Open the link and approve read-only access to your professional (Business or Creator) account. That's the only step on your end.

Your website shows your posts

We securely store and auto-refresh your token, then serve your latest public posts to your site — kept current automatically, with nothing more to do.

Scope & permissions

Built to do one thing — and visibly nothing else.

WHAT IT DOES

  • Reads only your own public posts (media URL, caption, timestamp, permalink) to display them.
  • Stores one access token, encrypted at rest, and refreshes it automatically.
  • Serves that feed to your own websites over a read-only endpoint.

WHAT IT NEVER DOES

  • Never posts, comments, or likes on your behalf — there is no write access.
  • Never reads direct messages, followers, or private data.
  • Never sells or shares your data. Disconnect and delete it in one click, anytime.
Trust & security

Security-first by default.

Tokens encrypted at rest

Access tokens are encrypted in the database and never exposed in feeds, logs, or the browser.

GDPR-compliant

We collect the minimum needed to display your feed, with a clear legal basis and defined retention.

One-click data deletion

Remove the app in Instagram or request deletion here — the token and cached feed are erased within 30 days.

Invitation only

Connect once. Stay current forever.

Connecting is by personal invitation — your account receives a one-time link, then it runs itself. Want one set up? Get in touch.