Waveloop asks for permissions — is that safe?

Yes. Those are Meta’s standard scopes for messaging and comments, granted through the official Instagram Graph API — the same infrastructure Meta requires of every approved partner. We only request what your automations actually need, and you can revoke access at any time from Instagram Settings → Apps and websites. Read more on Account Safety and our Security page.