InstaOutreach

InstaOutreach uses AI to draft cold openers and replies, classify every inbound reply and move a lead toward a booked call. Each reply agent runs on a system prompt the customer writes, covering company, offer, proof, tone and rules, and a playground tests it against a mock conversation. Two agents can split one campaign to compare bookings, and the AI answers in whatever language the prospect wrote in. Templates run campaigns without AI, but the qualification and reply workflow depends on intent classes that drive the inbox and pipeline.

Each reply agent runs in draft mode, where a person approves or edits every reply, or in auto mode. In auto mode only warm intents, interested and booking, send on their own, and questions and ambiguous messages are always drafted. Objection replies are drafted by default, but that default can be switched off, so the review boundary depends on setup.

The extension pauses the moment someone touches the Instagram tab, and MCP campaign creation produces a paused draft that must be launched in the dashboard. A confirmed booking stops remaining follow ups and silences the AI setter on that thread.

The customer controls each agent's system prompt and can test it before connecting it to a campaign. Incoming messages receive one of six intent labels (interested, question, booking, objection, not interested or neutral), and the first three count as qualified and advance the pipeline stage. Model providers and versions are not named. There is no numeric fit score for cold leads before contact; classification starts with the prospect's reply. Booking links go out only once a prospect signals readiness, never in the opening message.

The dashboard tracks DMs sent, reply rate, calls booked and account health for each account, and the homepage example of 312 DMs, a 41% reply rate and nine calls is a demonstration rather than a customer result. No named customer outcome or case study accompanies those metrics. Coldabry LLC says it runs the product on its own accounts before shipping changes. Confirmed meetings carry a firmer definition: Calendly or Cal.com sends a booking event back to the workspace, and a token on the booking link ties it to the thread that produced it.

Marking a lead rejected or do not contact blocks further outreach across every list and campaign in the workspace. Any reply ends that lead's follow up sequence, and a confirmed booking cancels the remaining steps even for leads who never replied. The acceptable use policy prohibits spam, deceptive impersonation, targeting minors and attempts to bypass rate limits or warmup.

There is no consent collection system, and InstaOutreach is explicit that it sends cold DMs to people who have never spoken to the sender. Customers may connect only Instagram accounts they own or are authorized to manage.

The extension sends campaign results, synced conversations, collected lead profiles and basic technical data to the hosted workspace, and it reads only Instagram and InstaOutreach's own site, never browsing history or saved passwords. Named processors are Stripe, NOWPayments, Brevo, Hetzner and ipinfo.io, with no AI processor named and no cross border transfer mechanism. A customer's phone number may be used to contact them on WhatsApp. Referral visits are logged with a daily rotating hash of the IP address. Account deletion removes the organization's operational data, subject to legal retention.

Supported sources are hashtag post authors, Instagram locations, a competitor's followers, seed accounts, imported CSV or pasted handles, and anyone who replies. Following lists, post commenters and post likers are not collected. CSV import maps columns to username, status, tags, notes or up to ten custom fields, with the delimiter detected automatically. InstaOutreach advises starting with a few hundred well targeted handles rather than thousands of loose ones. No contractual license accompanies an extracted audience, and the lead table filters, sorts and exports to CSV.

Safe Mode drives the real Instagram interface through the customer's logged in Chrome with human paced clicks, typing and scrolling. Using the interface does not make it an authorized integration, and the terms acknowledge that automation may conflict with Instagram's rules and lead to bans. The MCP tools include a command that skips warmup for accounts the customer describes as already aged. Workspaces created before September 24, 2026 can keep a server mode using supplied proxies, and the new Mac app logs accounts in with saved passwords, two factor codes and per account proxies.

The privacy policy restricts data use to operating the service, rules out sale and third party advertising, and holds extension data to the Chrome Web Store Limited Use rules. It does not say whether conversation data trains shared AI models or which provider processes it. Credentials are never accepted over MCP, so passwords and two factor secrets do not pass through a customer's AI client. Reply agents can be tested on mock conversations, and templates let a campaign run entirely on customer written text.

AI messages go out from an Instagram account the customer owns or is authorized to manage. Drafts can be edited and warm replies can send automatically, with no default notice telling recipients that AI wrote them. The acceptable use rules prohibit deceptive impersonation. Each agent's prompt sets the company, offer, tone and rules it speaks for, and the AI replies in the prospect's own language. Booking links are stamped per conversation, so a meeting returns to the thread that started it.

Calendly and Cal.com webhooks confirm bookings, with a signing secret proving each event's origin; bookings from unstamped links fall back to handle or email matching, and anything unmatched is flagged. A REST API enrolls up to 5,000 leads a minute with an external reference, so funnel status writes back to the CRM record, and an org data API, keyed on request, serves stats, accounts, inbox threads and draft approval. Qualified replies queue in an outbox that posts to the customer's webhook and retries failures on the next flush. A hosted MCP server lets Claude Code or Cursor manage accounts by chat.

The default setup pairs a hosted workspace on Hetzner with a Chrome extension for version 114 or newer, loaded unpacked in Developer mode because it is not yet on the Chrome Web Store. A Mac app, version 0.2.40 for macOS 13 and later, runs the same engine with a separate Instagram session per account; macOS blocks the download until the user approves it, so installation runs a Terminal command or an Open Anyway override. Each open Chrome profile drives one sender, and nothing sends while the browser or app is closed. There is no region selection.

Account passwords are hashed with bcrypt, app and extension traffic uses TLS, and server mode credentials are encrypted at rest. API keys are stored as SHA 256 hashes, shown once, scoped to one organization and revocable instantly, with read only and operator scopes. The Mac app fetches saved Instagram passwords and two factor codes into memory only, and every handout is written to an audit record. No certification or audit report accompanies these controls. The extension reaches only Instagram and InstaOutreach, and the MCP server never accepts credentials.

The first account costs $29 a month and each extra account $14.50, up to 20 by self service, so ten accounts cost $159.50 monthly. Yearly billing saves 43%, starting at $199 for the first account, and a lifetime plan costs $499 plus $249.50 per extra account. Crypto payments through NOWPayments run 5% cheaper but buy fixed periods that do not renew. Every feature sits in the one plan, although the lifetime terms bill usage add ons such as AI credits separately without a unit price. The 14 day trial needs a card, and account changes are prorated.

The lead table exports to CSV, and the API returns campaign state, inbox threads and their messages. API reads keep working after a subscription or trial lapses, so a customer can still pull its own data while writes are refused, and lapsed crypto plans keep the workspace intact. Cancellation keeps use through the paid period, and account deletion removes organizational data with legal retention exceptions and no stated deadline. Thread retrieval caps at 200 messages per conversation, so the API alone is not a complete archive. The Mac app leaves Instagram sessions and logs on the Mac until its folders are deleted by hand.

A sender defaults to 40 DMs a day under a hard ceiling of 75, sends only during the active hours set, and backs off automatically when Instagram pushes back, while health checks pause risky accounts. New accounts warm up for days with browsing and likes, counted only on days the extension runs, yet the trial is also said to send on day one at a slowly rising pace, a wording conflict. Pace runs Balanced by default or Conservative. The same limits apply to API and MCP requests. Manual use of the Instagram tab pauses the extension.

InstaOutreach targets agencies and appointment setters running Instagram client acquisition, with workspace or agent level calendars for different clients and setters. It is operated by Coldabry LLC, a small studio that also builds clinic CRM and SEO software. It works only on Instagram, not X, LinkedIn or TikTok, and accounts scale by self service to 20. Support runs by email and WhatsApp, with live demos on request. Parallel sending needs an open Chrome profile for each account, or the Mac app.