> ## Documentation Index
> Fetch the complete documentation index at: https://docs.notifique.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# API key scopes

> Instagram permissions: send, read, cancel, edit, delete, manage connections, and comments.

<Tip>
  Each scope is a **door** on your key: connection, send, read, edit, or comment moderation, open only what you need.
</Tip>

Each **scope** unlocks one kind of Instagram operation. Grant only what your integration needs.

## How to send the key

**Recommended**

```http theme={null}
Authorization: Bearer sk_live_your_key_here
```

**Alternative**

```http theme={null}
x-api-key: sk_live_your_key_here
```

<Info>
  The API key belongs to **one** workspace. You cannot access another workspace with the same key.
</Info>

## Common combinations

<CardGroup cols={2}>
  <Card title="Basic send" icon="paper-plane">
    `instagram:instances:create`, `instagram:instances:list`, `instagram:send`
  </Card>

  <Card title="Send and read" icon="magnifying-glass">
    `instagram:send`, `instagram:read`
  </Card>

  <Card title="With cancel" icon="clock">
    `instagram:send`, `instagram:cancel`
  </Card>

  <Card title="Full flow" icon="list-check">
    `instagram:send`, `instagram:read`, `instagram:cancel`, `instagram:update`, `instagram:delete`
  </Card>
</CardGroup>

<Warning>
  An **empty** scope list on creation means **ADMIN** access. Always restrict in production.
</Warning>

## Available scopes

<AccordionGroup>
  <Accordion title="instagram:instances:list">
    List Instagram connections for the workspace.
  </Accordion>

  <Accordion title="instagram:instances:create">
    Create a connection and complete login (includes resolving challenges).
  </Accordion>

  <Accordion title="instagram:instances:disconnect">
    Disconnect an active session.
  </Accordion>

  <Accordion title="instagram:instances:delete">
    Remove a connection.
  </Accordion>

  <Accordion title="instagram:send">
    Send DMs: text and media via HTTPS URL.
  </Accordion>

  <Accordion title="instagram:read">
    List outbound, inbound, connection status, and comments.
  </Accordion>

  <Accordion title="instagram:cancel">
    Cancel a queued or scheduled message.
  </Accordion>

  <Accordion title="instagram:update">
    Edit text of a sent message (15-minute window, up to 5 edits, max 1000 characters).
  </Accordion>

  <Accordion title="instagram:delete">
    Unsend a sent message when Instagram allows it.
  </Accordion>

  <Accordion title="instagram:comments:reply">
    Reply to comments on your own media.
  </Accordion>

  <Accordion title="instagram:comments:moderate">
    Moderate comments (for example delete).
  </Accordion>
</AccordionGroup>

## Limit by connection

If the key has an **instance allowlist**, it only sees those connections.

## Next steps

* [Quick Start](/en/instagram-api/como-funciona/quick-start)
* [Webhook events](/en/instagram-api/como-funciona/eventos-do-webhooks)
* [Introduction](/en/instagram-api/como-funciona/introducao)