X AI MCP server

by IvanBBaev·io.github.IvanBBaev/x-mcp-ai·v0.8.0

No reviews yet

Safety-first X (Twitter) API v2 MCP server: 41 typed tools across 12 packages, policy-gated.

B83/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B83/100

full report

Adoption

Growing

0 stars40 downloads/wk

Reviews

Write one

Nobody has reviewed X AI yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

X AI tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan58 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

Runs npx -y x-mcp-ai on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add x-mcp-ai -- npx -y x-mcp-ai

Add to Cursor

X AI: common questions

Is X AI MCP server safe?: Mostly: it is graded B (83/100). Read the X AI safety report
How do I install X AI?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does X AI need an API key?: Yes. The registry entry asks for X_MCP_CLIENT_SECRET, X_MCP_BEARER_TOKEN.
Is X AI maintained?: The last commit was 2 days ago (2026-09-19). The latest release is v0.8.0.
What can I use instead of X AI?: Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.

Alternatives to X AI

Same job from other publishers: the closest match first, then the best rated.

SSH — policy-gated remote access
Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.
not reviewed
Established
B

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 83/100
Stars: 0
Downloads/wk: 40
Price: Free
Licence: MIT
Transport: Local · npm
Version: 0.8.0
Category: Everything else
Last release: 2026-09-19

Credentials it needs

X_MCP_AUTH_MODEAuthentication mode: oauth2 (default) or app-only.
X_MCP_CLIENT_IDOAuth 2.0 client ID (oauth2 mode).
X_MCP_CLIENT_SECRETsecretOAuth 2.0 client secret (confidential clients only).
X_MCP_BEARER_TOKENsecretApplication-only bearer token (app-only mode).
X_MCP_TOKEN_FILEPath to the rotating OAuth 2.0 token store (default: OS-resolved).
X_MCP_TOKEN_KEYCHAINSet to 1 to keep OAuth 2.0 tokens in the OS keychain (macOS, Linux) instead of a token file. Mutually exclusive with an explicit X_MCP_TOKEN_FILE.
X_MCP_POLICYPolicy preset: read-only (default), engage, publish, manage, or full.
X_MCP_POLICY_ALLOWComma-separated op:domain cells to allow on top of the preset (e.g. read:dm,write:dm).
X_MCP_POLICY_DENYComma-separated op:domain cells to deny; deny beats allow beats preset.
X_MCP_HIDE_DENIEDSet to 1 to drop policy-denied tools from registration entirely instead of registering them annotated as denied.
X_MCP_MEDIA_DIRDirectory uploads must resolve inside. Media upload is disabled unless this is set.
X_MCP_AVAILABILITYComma-separated specially-provisioned access classes to declare: pilot, premium-user, enterprise. Unset means the conservative default (app+user, user-only).
X_MCP_PROFILES_FILEPath to a profiles file holding named configuration blocks.
X_MCP_PROFILEName of the profile to select from the profiles file.
X_MCP_TIMEOUT_MSPer-HTTP-request timeout in milliseconds (default 30000).
X_MCP_LOG_LEVELDiagnostic verbosity on stderr: silent, error, info (default), or debug.
X_MCP_CREDIT_BUDGETSession spend cap in USD.
X_MCP_BUDGET_MODEBudget enforcement: warn (default) or hard.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ivanbbaev-x-mcp-ai.svg)](https://mcp.market/server/ivanbbaev-x-mcp-ai)

How the badge works