X (Twitter) MCP server

by Role1776·io.github.Role1776/mcp-x·v0.1.1

No reviews yet

Search, read and publish X posts and manage users, lists and media via the X API v2.

B73/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B73/100

full report

Adoption

New

1 stars

Reviews

Write one

Nobody has reviewed X (Twitter) yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

X (Twitter) tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.7 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 9 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 73/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

claude mcp add mcp-x -- docker run -i --rm ghcr.io/role1776/mcp-x:0.1.1

Add to Cursor

X (Twitter): common questions

Is X (Twitter) MCP server safe?: Mostly: it is graded B (73/100). Read the X (Twitter) safety report
How do I install X (Twitter)?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does X (Twitter) need an API key?: Yes. The registry entry asks for X_API_KEY, X_API_KEY_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET.
Is X (Twitter) maintained?: The last commit was 11 days ago (2026-09-10). The latest release is v0.1.1.
What can I use instead of X (Twitter)?: Servers from other publishers that do the same job: Reddit MCP server, Readdit Later MCP server and Bluesky MCP server. Compare all X (Twitter) alternatives.

Alternatives to X (Twitter)

Same job from other publishers: the closest match first, then the best rated.

All X (Twitter) alternatives →

Reddit
Reddit MCP server with full read/write - posts, comments, search, and content creation.
not reviewed
Established
B
Readdit Later
Search, organize, and chat with your saved Reddit posts from Claude, Cursor, and any MCP client.
not reviewed
Growing
B
Bluesky
Search posts, profiles, feeds, threads, and trending topics on Bluesky.
not reviewed
Growing
A

X (Twitter) vs Reddit X (Twitter) vs Readdit Later X (Twitter) vs Bluesky

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 73/100
Stars: 1
Downloads/wk: –
Price: Free
Licence: MIT
Transport: Local · mixed
Version: 0.1.1
Category: Web search
Last release: 2026-09-10

Credentials it needs

X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/role1776-mcp-x.svg)](https://mcp.market/server/role1776-mcp-x)

How the badge works