In your app
A controller answers a route on your app: it callsupdateInstagramPost() and returns the answer.
Add the controller
app/Http/Controllers/UpdateInstagramPostController.php
Add the route
routes/web.php
auth lets only your signed-in users reach it.Call it
Your own page’s form or script sends
PATCH /instagram-post/clx8m2k4p0000a1b2c3d4e5f6 (a form adds @csrf, as every web route checks it, and @method('PATCH')), and gets back its answer as JSON. Test it, below, calls it.Call it from the terminal
Terminal
updateInstagramPost() on your default site and prints its answer as JSON. It writes, so it asks first: add --force to skip the question in a script. See Call any method from the terminal for every argument type.
Find the id
id is the document’s _id, from a list. Ask the list for only the fields you need: each row is a document’s id and those fields.
Laravel
Terminal
$row['id'] as id. Drafts: list with aposMode: 'draft' to get the draft’s id (Find an id).
Required parameters
Required parameters
Named arguments, e.g.
updateInstagramPost(id: …); leave out the optional ones.Optional parameters
Optional parameters
Optional. Leave it out and the site uses
"published". published (the default) or draft. Drafts need a credential that may see them: an API key with the type’s write scope (content:<type>:write), or a signed-in editor. The public and a key with only the read scope get 403. One of draft, published.Optional. Leave it out (or pass
null) and it isn’t sent: the site’s default applies. The locale to read or write, e.g. en (default: the site’s default locale).Optional. Leave it out and the site uses
"". Its title: the name it goes by in every list, and the heading of its page where it has one.Optional. Leave it out and the site uses
"". The post caption. Shown (optionally truncated) under the image.Optional. Leave it out and the site uses
"image". Drives the corner badge (a video/reel/album marker). One of image, video, carousel.Optional. Leave it out and the site uses
false. Marks a video post as a reel (shows a reel badge instead of a generic video badge).Optional. Leave it out and the site uses
false. Hand-curation flag. The widget can be set to show only featured posts.Optional. Leave it out and the site uses
"". The URL name: lowercase words joined by hyphens (letters outside a–z, even emoji, are kept).Optional. Leave it out and the site uses
"public". Select whether this content is public or private. One of public, loginRequired.Optional. Leave it out (or pass
null) and it isn’t sent: the site’s default applies. An ISO 8601 date and time, e.g. 2026-10-21T14:30:00.000Z.Optional. Leave it out (or pass
null) and it isn’t sent: the site’s default applies. An ISO 8601 date and time, e.g. 2026-10-21T14:30:00.000Z.Optional. The post image (a first-party media-library image). Used for manual posts and for synced posts when “re-host” storage is on. Falls back to the image URL below when empty. The related
@apostrophecms/image documents, in order (empty when none). To set it, send a list of { "_id": "…" }, one per document (one at most); a document the site can’t find is left out. At most 1 items.Optional. Leave it out (or pass
null) and it isn’t sent: the site’s default applies. A direct image URL (set by a sync in “hot-link” storage mode). Used only when no library image is set above. Instagram CDN URLs expire — prefer a library image. When set, a URL; empty or null when not.Optional. The playable clip as a first-party file (a piece from the Videos library). Set by a sync when “re-host” video storage is on; also pickable by hand for a manual post. Takes precedence over the video URL below — and, unlike it, never expires and needs no cookie consent to play. The related
video documents, in order (empty when none). To set it, send a list of { "_id": "…" }, one per document (one at most); a document the site can’t find is left out. At most 1 items.Optional. Leave it out (or pass
null) and it isn’t sent: the site’s default applies. A direct, hot-linked video file URL (set by a sync for video/reel posts under “hot-link” video storage). Played in-place in the on-site lightbox; the still image above is the poster. Instagram CDN video URLs expire quickly (~32h) — the site re-checks freshness and the cron keeps it rotating, and a visitor who has not accepted functional cookies gets the still instead (the file loads from Meta). Re-host the video to avoid both. When set, a URL; empty or null when not.Optional. Leave it out (or pass
null) and it isn’t sent: the site’s default applies. The link to this post on Instagram. The whole tile links here when set. When set, a URL; empty or null when not.Optional. Leave it out (or pass
null) and it isn’t sent: the site’s default applies. Posted date. Format: an ISO 8601 date (YYYY-MM-DD).Optional. Leave it out and the site uses
false. In the archive: kept, but out of every list and off the site until it is restored. false (or null) for a live document.Returns
Returns
An
InstagramPost (Fetchski\AttractCmsLaravel\Data\InstagramPost). InstagramPost content type. Read its properties ($instagramPost->title): each says whether the site always sends it. The example answer is the site’s wire JSON: some keys differ from the property names (_id → id, _mediaImage → mediaImage, _video → video).Always sent. Its title: the name it goes by in every list, and the heading of its page where it has one.
Always sent. The URL name: lowercase words joined by hyphens (letters outside a–z, even emoji, are kept).
Always sent. The document’s id. On a type with drafts it ends in its locale and mode (
…:en:published, …:en:draft): the part before the first colon is its aposDocId, shared by both copies. The {_id} the type’s routes take.Sometimes sent:
null when the site leaves it out. The post caption. Shown (optionally truncated) under the image.Sometimes sent:
null when the site leaves it out. Drives the corner badge (a video/reel/album marker). One of image, video, carousel; a newer site may send others, so keep a fallback.Sometimes sent:
null when the site leaves it out. Marks a video post as a reel (shows a reel badge instead of a generic video badge).Sometimes sent:
null when the site leaves it out. Hand-curation flag. The widget can be set to show only featured posts.Sometimes sent:
null when the site leaves it out. Select whether this content is public or private. One of public, loginRequired; a newer site may send others, so keep a fallback.Sometimes sent:
null when the site leaves it out. An ISO 8601 date and time, e.g. 2026-10-21T14:30:00.000Z.Sometimes sent:
null when the site leaves it out. An ISO 8601 date and time, e.g. 2026-10-21T14:30:00.000Z.Sometimes sent:
null when the site leaves it out. The post image (a first-party media-library image). Used for manual posts and for synced posts when “re-host” storage is on. Falls back to the image URL below when empty. The related @apostrophecms/image documents, in order (empty when none). To set it, send a list of { "_id": "…" }, one per document (one at most); a document the site can’t find is left out. At most 1 items.Sometimes sent:
null when the site leaves it out. A direct image URL (set by a sync in “hot-link” storage mode). Used only when no library image is set above. Instagram CDN URLs expire — prefer a library image. When set, a URL; empty or null when not.Sometimes sent:
null when the site leaves it out. The playable clip as a first-party file (a piece from the Videos library). Set by a sync when “re-host” video storage is on; also pickable by hand for a manual post. Takes precedence over the video URL below — and, unlike it, never expires and needs no cookie consent to play. The related video documents, in order (empty when none). To set it, send a list of { "_id": "…" }, one per document (one at most); a document the site can’t find is left out. At most 1 items.Sometimes sent:
null when the site leaves it out. A direct, hot-linked video file URL (set by a sync for video/reel posts under “hot-link” video storage). Played in-place in the on-site lightbox; the still image above is the poster. Instagram CDN video URLs expire quickly (~32h) — the site re-checks freshness and the cron keeps it rotating, and a visitor who has not accepted functional cookies gets the still instead (the file loads from Meta). Re-host the video to avoid both. When set, a URL; empty or null when not.Sometimes sent:
null when the site leaves it out. Why this post’s clip is still loading from Instagram instead of your own media library. Anything other than the first value means the video expires in ~32h and is hidden from visitors who declined functional cookies. “Too large” is fixable: raise the cap in Connections → Instagram. One of “, too-large, not-video, failed; a newer site may send others, so keep a fallback.Sometimes sent:
null when the site leaves it out. The link to this post on Instagram. The whole tile links here when set. When set, a URL; empty or null when not.Sometimes sent:
null when the site leaves it out. Posted date. Format: an ISO 8601 date (YYYY-MM-DD).Sometimes sent:
null when the site leaves it out. A list of InstagramPostCommentsItem. Comments.Sometimes sent:
null when the site leaves it out. A list of InstagramPostHiddenCommentsItem. Hidden comments.Sometimes sent:
null when the site leaves it out. Source. One of manual, instagram-login, facebook-login, demo; a newer site may send others, so keep a fallback.Sometimes sent:
null when the site leaves it out. The Graph media id — the de-duplication key set by a sync.Sometimes sent:
null when the site leaves it out. In the archive: kept, but out of every list and off the site until it is restored. false (or null) for a live document.Sometimes sent:
null when the site leaves it out. With videoRehostStatus: too-large, the size cap (bytes) the clip was over; 0 otherwise. Set by the sync.Sometimes sent:
null when the site leaves it out. When it was created (ISO 8601). Format: an ISO 8601 date and time.Sometimes sent:
null when the site leaves it out. When it last changed (ISO 8601). Format: an ISO 8601 date and time.Sometimes sent:
null when the site leaves it out. The draft’s preview share key, while its share link is on: the link is the draft’s _url with aposShareKey and aposShareId (the draft’s _id) in its query. Absent otherwise, and on published documents.Errors
Errors
Nothing to catch: the SDK retries what is safe, and Laravel logs and renders the rest (see Errors and testing).
The site refused what was sent:
errors() lists each field’s problem, siteMessage() the first.Retried first: No. Read: errors() (field → messages), siteMessage().The API key is missing or refused (malformed, revoked, expired), or a signature its signing mode needs is missing or stale.Retried first: No. Read:
siteMessage(), errorName(), data().The key may not do this: a scope it lacks, or an address outside its allowlist.
siteMessage() names it.Retried first: No. Read: siteMessage(), errorName(), data().Nothing matches, or the caller may not see it.Retried first: No. Read:
siteMessage(), errorName(), data().The site failed. Its logs say why.Retried first: No: a write may have landed. Read:
siteMessage(), errorName(), data().No answer: DNS, a refused connection, TLS, or the timeout (15 s per attempt by default).Retried first: Only when nothing reached the site (
neverConnected()); never after a timeout, when it may have landed. Read: reason(), neverConnected().The client refused to send it (e.g. a path segment of
..); the site never saw it.Retried first: No. Read: reason() (what to change).Any other status, or a success whose JSON doesn’t match this SDK version’s types (update the SDK).Retried first: No. Read:
reason(), status().Attract::site('acme') named a slug that isn’t under sites in config/fetchski-attract.php.Retried first: No: nothing was sent. Read: getMessage(), $e->slug.Behavior
- Access: an API key with
content:instagram-posts:write(or a master above it:content:instagram-posts:all,content:all,admin:all). In published mode (the default) it goes live too, so the key also needscontent:instagram-posts:publish(or a master above it); sendaposMode=draft(or a draft_idand noaposMode) to change only the draft. A signed-in person may call it as far as their own permissions allow; anyone else gets 403. - Rate limit: the key’s own writes-per-minute limit, set when the key is created (default 120); over it, 429 with
Retry-After. The client waits and retries for you; you seeRateLimitedonly if that runs out. - Retries: a write is sent again only after a 429 (refused before it acted) or when it never reached the site. After a timeout or a 5xx it may have landed: check before you send it again.
- Timeout: 15 s per attempt by default; raise
timeoutinconfig/fetchski-attract.phpfor longer.
Test it
It calls the route above with the SDK faked: the fake answers every call with a valid example, so nothing leaves your machine and no config or key is needed. Save it astests/Feature/UpdateInstagramPostTest.php, then run your tests:
tests/Feature/UpdateInstagramPostTest.php
Terminal
instagramPosts.updateInstagramPost with InstagramPost::factory()->make([...]), the fields you give over a valid example.
tests/Feature/UpdateInstagramPostAnswerTest.php
Related
List an Instagram post’s locales
Attract::instagramPosts()->getInstagramPostLocales()List Instagram posts
Attract::instagramPosts()->listInstagramPosts()Create an Instagram post
Attract::instagramPosts()->createInstagramPost()Get an Instagram post
Attract::instagramPosts()->getInstagramPost()Replace an Instagram post
Attract::instagramPosts()->replaceInstagramPost()Delete an Instagram post
Attract::instagramPosts()->deleteInstagramPost()PATCH /instagram-post/{_id}
The endpoint this calls, in the API reference: the HTTP request and answer, and every rule the site checks.