X (Twitter) MCP server

by Role1776·io.github.Role1776/mcp-x·v0.1.1·2 stars

No reviews yet

Search, read and publish X posts and manage users, lists and media via the X API v2.

C65/100grade C

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

C65/100

full report

Adoption

New

2 stars

Reviews

Write one

Nobody has reviewed X (Twitter) yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

X (Twitter) tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

no findings

–Code scanpackage could not be scannedn/a
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 35 days ago12/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How X (Twitter) compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 65/100; higher than 20% of 3,471 Web search servers
GitHub stars: 2; more than 70% of 1,788 Web search servers

Install X (Twitter) in Claude Code, Cursor or VS Code

claude mcp add mcp-x -- docker run -i --rm ghcr.io/role1776/mcp-x:0.1.1

Add to Cursor

What the publisher says

From the X (Twitter) repository's README, as published. We do not edit it. Read it on GitHub

mcp-x

An MCP server that gives an LLM the X (Twitter) API: read and search posts, manage users and lists, upload media, and publish — as the account whose keys it runs on.

Website · Costs · Credentials · Tools · Quick start · Configuration · Architecture · Contributing

What it is

mcp-x is a Model Context Protocol server written in Go. It exposes the X API v2 to any MCP-compatible client (Claude Desktop, IDE agents, custom LLM apps) as 42 tools covering posts, users, lists and media.

It authenticates with OAuth 1.0a user context, which means every call acts as a real X account — the one the four keys belong to. xpostcreate publishes publicly. xuserfollow really follows. xpostdelete is irreversible. This is not a sandbox, and it is not free: see The X API costs money before you wire it into an agent.

Both transports the MCP SDK supports are available and expose the identical tool set:

stdio — the client launches the binary and talks over stdin/stdout (the default, ideal for desktop clients).
http — a long-running streamable HTTP server (useful for remote/shared deployments).

The X API costs money

[!WARNING]

There is no free tier any more. X retired the Free/Basic/Pro subscription tiers for new developers and moved to pay-per-use credits: you buy credits upfront in the Developer Console and every request deducts from the balance in real time. Legacy Basic ($200/mo) and Pro ($5,000/mo) subscriptions survive only for accounts that already had them; Enterprise starts around $42,000/mo. A new developer account today gets pay-per-use and nothing else.

Rates at the time of writing (official pricing — always re-check the Console, they have changed several times in 2026):

Two things follow from this, and both are baked into the server:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

2026-10-15downgradeB → Cscore 65

X (Twitter): common questions

Is X (Twitter) MCP server safe?: With care: it is graded C, so read the findings first (65/100). Read the X (Twitter) safety report
How do I install X (Twitter)?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does X (Twitter) need an API key?: Yes. The registry entry asks for X_API_KEY, X_API_KEY_SECRET, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET.
Is X (Twitter) maintained?: The last commit was 56 days ago (2026-09-10). The latest release is v0.1.1.
What can I use instead of X (Twitter)?: Servers from other publishers that do the same job: Reddit MCP server, Tenjin MCP server and Reddit Buddy MCP server.
How does X (Twitter) compare with other Web search MCP servers?: safety score 65/100 (higher than 20% of 3,471 Web search servers); github stars 2 (more than 70% of 1,788 Web search servers). Full comparison.

Alternatives to X (Twitter)

Same job from other publishers: the closest match first, then the best rated.

Reddit
Reddit MCP server with full read/write - posts, comments, search, and content creation.
not reviewed
Established
B
Tenjin
Search, read & publish paid essays. Pay-per-read in USDC on Base (x402); wallet-only, no account.
not reviewed
Established
B
Reddit Buddy
Reddit MCP server - browse posts, search content, analyze users.
not reviewed
Established
A

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: C · 65/100
Stars: 2
Downloads/wk: –
Price: Free
Licence: MIT
Transport: Local · mixed
Version: 0.1.1
Category: Web search
Last release: 2026-09-10

Credentials it needs

X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.
X_API_KEYsecretOAuth 1.0a consumer key. developer.x.com -> your project -> your app -> Keys and tokens.
X_API_KEY_SECRETsecretOAuth 1.0a consumer secret, issued together with X_API_KEY.
X_ACCESS_TOKENsecretUser access token. Set the app permissions to Read and Write BEFORE generating it: a token keeps the permissions it was created with, and a read-only one fails every write until it is regenerated.
X_ACCESS_TOKEN_SECRETsecretUser access token secret, issued together with X_ACCESS_TOKEN.
MEDIA_ROOTAbsolute path to an existing directory - the only one x_media_upload may read files from. Anything outside it is refused, symlinks included. Checked at startup.
MCP_TRANSPORTstdio (client spawns the process) or http (streamable HTTP listener).
MCP_NAMEServer name reported in the MCP initialize handshake.
MCP_PATHHTTP path the MCP endpoint is served on. Used only when MCP_TRANSPORT=http.
SERVER_PORTTCP port to listen on. Used only when MCP_TRANSPORT=http.
SERVER_READ_TIMEOUTHTTP read timeout as a Go duration. Used only when MCP_TRANSPORT=http.
SERVER_WRITE_TIMEOUTHTTP write timeout as a Go duration. Used only when MCP_TRANSPORT=http.
LOG_MODElocal (text, debug) or prod (JSON, info). Logs go to stderr.
MAX_IDLE_CONNS_PER_HOSTIdle connections the outbound HTTP client keeps per host.
X_DEBUGLog the raw requests sent to the X API. Verbose; the output can contain request details, so keep it off outside debugging.
POSTS_MAX_QUERIESQueries accepted in one x_posts_search or x_posts_count call.
POSTS_MAX_USERNAMESUsernames accepted in one x_posts_by_user call.
POSTS_MAX_IDSPost ids accepted in one x_posts_lookup call. The X API caps this at 100.
POSTS_DEFAULT_RESULTSPosts returned per query when the call does not ask for a count. Every post returned is billed.
POSTS_MAX_RESULTSUpper bound for posts per query. The X API caps this at 100.
POSTS_DEFAULT_DAYSHow far back post searches look when the call does not say, in days.
POSTS_MAX_DAYSFurthest back a post search may look, in days. Recent search cannot exceed 7.
POSTS_DEFAULT_TIMEOUT_MSTimeout for a posts call in milliseconds when the call does not request one.
POSTS_MIN_TIMEOUT_MSLowest timeout a posts call may request, in milliseconds.
POSTS_MAX_TIMEOUT_MSHighest timeout a posts call may request, in milliseconds.
USERS_MAX_USERNAMESUsernames accepted in one x_users_lookup call. The X API caps this at 100.
USERS_MAX_IDSUser ids accepted in one x_users_lookup call. The X API caps this at 100.
USERS_DEFAULT_RESULTSUsers returned per page when the call does not ask for a count.
USERS_MAX_RESULTSUpper bound for users per page.
USERS_DEFAULT_TIMEOUT_MSTimeout for a users call in milliseconds when the call does not request one.
USERS_MIN_TIMEOUT_MSLowest timeout a users call may request, in milliseconds.
USERS_MAX_TIMEOUT_MSHighest timeout a users call may request, in milliseconds.
LISTS_DEFAULT_RESULTSItems returned per list page when the call does not ask for a count.
LISTS_MAX_RESULTSUpper bound for items per list page. The X API caps this at 100.
LISTS_DEFAULT_TIMEOUT_MSTimeout for a lists call in milliseconds when the call does not request one.
LISTS_MIN_TIMEOUT_MSLowest timeout a lists call may request, in milliseconds.
LISTS_MAX_TIMEOUT_MSHighest timeout a lists call may request, in milliseconds.
MEDIA_CHUNK_BYTESBytes per upload segment. The X APPEND endpoint caps a segment at 5 MB.
MEDIA_POLL_INTERVAL_MSHow often the upload status is polled while X transcodes a video, in milliseconds.
MEDIA_DEFAULT_TIMEOUT_MSTimeout for a whole upload in milliseconds when the call does not request one.
MEDIA_MIN_TIMEOUT_MSLowest timeout an upload may request, in milliseconds.
MEDIA_MAX_TIMEOUT_MSHighest timeout an upload may request, in milliseconds.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/role1776-mcp-x.svg)](https://mcp.market/server/role1776-mcp-x)

How the badge works