Back to dashboard

App settings

Configure integrations used by your widgets.

Instagram integration

Required for Instagram widgets. Posts are fetched server-side via the Facebook Graph API and cached for 1 hour. Hashtag feeds and My account both use this token.

From your app at developers.facebook.com → Settings → Basic. Stored encrypted. Leave the secret blank to keep the saved one.

Paste a token from Graph API Explorer with pages_show_list, instagram_basic, and instagram_manage_insights. A short-lived token is fine. On save, MOSAIC exchanges it for a 60-day token and reads the Page token for the Instagram account below. The hourly cron extends it again when fewer than 10 days remain. Leave blank to keep the saved token.

Filled in automatically when the user token, app secret, and Instagram account ID are saved. Paste a page token here only if you are not using automatic renewal. Leave blank to keep the saved token.

Find this in Graph API Explorer: GET /{your-page-id}?fields=instagram_business_account. Must be a Business or Creator account connected to the Page above.

Email (SMTP)

Used by Contact Form widgets to send notification emails. If left blank, forms fall back to PHP mail() — which usually works on cPanel but is more likely to get filtered as spam.

Stored in the database (not visible to the web). Leave blank to keep the existing password; type a new value to change it.

Each contact form submission can also override this with the submitter's email address — set that up in the form's Email tab.

Cron schedule

Set this once in cPanel. Every hour it refreshes Instagram posts and extends the Facebook token when fewer than 10 days remain.

  1. In cPanel, open Cron Jobs.
  2. Under Add New Cron Job, set Common Settings to Once Per Hour.
  3. Paste the command below into Command, then click Add New Cron Job.

If there is no Common Settings list, set Minute to 0 and Hour, Day, Month, and Weekday to *. Do not paste the five stars into Command. cPanel already has those boxes.

ALSO

Running it more often than once an hour is safe. Widgets that were fetched recently are skipped. The same run also deletes contact-form rate-limit rows older than 24 hours.

One line for a server crontab file, schedule included. Use this outside cPanel’s form.


      
If curl is missing, use wget in the Command box instead: