API keys
Create read-only keys for your own Instagram feeds. Keep keys on your website’s server.
Spam requests may block your key. Repeated request-limit violations trigger a temporary block.
Your keys
Loading API keys…
Up to 10 active keys. Revoked and expired keys stop working. A blocked key can be used again after its block expires.
GET /public/feed/:feedId
Instagram Feed API
Read selected Instagram media from a stored feed snapshot. Use X-API-Key to read your own feeds. An Instagram token is never shared with your website.
Loading feeds…
Responses contain a feed ID, name, Instagram username, selected media, refreshedAt, nextRefreshAt, and refreshIntervalHours. Refreshes follow the plan: 12 hours for Free/Creator and 6 hours for Growth/Business.
Cache the JSON on your website’s server until nextRefreshAt. Successful public reads count toward Feed API usage. Deleting a feed or disconnecting its Instagram account makes its endpoint unavailable.
Integrations
Set REFLECT_API_KEY on your website’s server to your generated key. Keep the key out of public frontend code.
curl --fail-with-body 'https://api.reflect.varcbytes.com/public/feed/YOUR_FEED_ID' \
--header "X-API-Key: $REFLECT_API_KEY"Cache the response until nextRefreshAt. If a request returns 429 or a blocked-key response, wait for Retry-After before trying again.