1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@x-api post a tweet saying 'Just shipped a new feature! 🚀'" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

x-api

by RongleCat

Overview Schema Related Servers Score Discussions

JavaScript

Local

NOTE

Not an official xAI or X product. This is an open-source plugin by 铁柱AGI / RongleCat for the local Grok App workbench and OpenAI Codex. It talks to X API v2 with your developer App credentials. Public lookups should stay on Grok subscription tools (x_search / x_keyword_search / …) so you do not spend pay-per-use credits on search.

Background write-up: 用积分刀刃上的授权流程 (@cgnot996).

Related MCP server: X (Twitter) MCP

Why this plugin

Job	Use
Search X / Twitter publicly	Grok built-in `x_search`, `x_keyword_search`, `x_semantic_search`, `x_user_search`, `x_thread_fetch` (subscription, no X developer credits)
Post, reply, like, follow, DMs, lists, your own data	This plugin (pay-per-use X API)
Official hosted MCP `https://api.x.com/mcp` (`xurl`)	Incomplete for posting; not a substitute

Zero runtime npm dependencies. Node 18+. Credentials live in ~/.x-api/credentials.json (mode 0600).

Auth (shorter than the 12-step PIN)

You still create a developer App once (Read and write, Native App, callback, website URL). What this plugin shortens is authorization, not the console.

Order	Path	When	Why it is shorter
1 (default)	Four console tokens	You operate the account that owns the App	No authorize URL, no PIN, tokens do not expire
2	OAuth 2.0 PKCE localhost	One browser Allow + refresh	Callback `http://127.0.0.1:8787/callback`; Native App secret empty
3	OAuth 1.0a localhost	Same keys, no PIN	User token does not expire
4	PIN / oob	No localhost	Same as the original article steps 8–11
5	Bearer	Public reads only	Cannot post

Install

Requires Node 18+.

Grok App (recommended)

Open Settings → Extensions → Plugins
Under Recommended, install X API (never auto-installs)
Confirm trust
Settings → Extensions → MCP → From plugins → x-api → Authorize
Start a new conversation so tools inject (x-api__status, x-api__create_post, …)

CLI equivalent:

grok plugin install --trust https://github.com/RongleCat/x-api
grok plugin enable x-api

Local checkout:

grok plugin install --trust /path/to/x-api
grok plugin enable x-api

Codex

The repo includes .codex-plugin/plugin.json. Install from the local path or git URL, or:

node scripts/register-mcp.mjs codex

Authorize

Do not paste secrets into chat.

In Grok App: MCP row Authorize (console four tokens, or browser OAuth 2).

Terminal:

node scripts/x-api.mjs login --tokens    # shortest, App-owner account
node scripts/x-api.mjs login --oauth2    # one Allow
node scripts/x-api.mjs login --oauth1
node scripts/x-api.mjs login --pin
node scripts/x-api.mjs status
node scripts/x-api.mjs whoami
node scripts/x-api.mjs logout

Non-interactive (used by Grok App):

node scripts/x-api.mjs login --tokens --no-prompt \
  --api-key … --api-secret … --access-token … --access-token-secret …

Env vars: see .env.example. HTTP(S)_PROXY is honored when exchanging OAuth codes (Node fetch does not use the system proxy by default).

Credits

Same split as the original article:

Read/search the public firehose: Grok subscription tools — do not put lookups through this plugin
Write / read your own account: this MCP (~$0.015 per plain post)
Do not put hostnames in the post body: x.com is auto-linked; cost jumps to ~$0.20

create_post rejects hostnames unless confirm_url_billing=true.

MCP tools

Post, delete, media, like/retweet/follow, bookmarks, hide replies, followers, mute/block, DMs, lists, trends, usage, whoami. Anything else: generic request with confirm_spend.

In a Grok session, tools are named x-api__<tool> (for example x-api__create_post).

Stdio speaks NDJSON for Grok App / Grok Build (same as official-aux). Content-Length is still accepted for Claude/Codex-style hosts.

Endpoint index: https://docs.x.com/x-api/llms.txt

Layout

.grok-plugin/plugin.json    Grok App / Grok Build
.codex-plugin/plugin.json   Codex
.mcp.json                   stdio MCP → mcp/server.mjs
skills/                     x-api + x-auth
commands/x-auth.md
mcp/                        zero-dep Node implementation
scripts/x-api.mjs           auth CLI

Development

npm test              # node --test
npx grok plugin validate .

No npm install required for runtime.

Security

See SECURITY.md. Report privately on X @cgnot996 or via GitHub Security Advisories. Never file tokens in public issues.

Project	Link
Grok App	RongleCat/grok-app · grok-app.com
GrokGo	RongleCat/grok-go
awesome-grok-bot	RongleCat/awesome-grok-bot

License & author

Channel	Link
𝕏 X (Twitter)	@cgnot996 (铁柱AGI)
📢 WeChat Official Account	Search 「铁柱AGI」 or scan the top-left QR
💬 WeChat community	Scan the top-right QR
🐙 GitHub	RongleCat

⭐ If this plugin saves you X API credits, please star the repo — and Grok App.

This server cannot be installed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Maintenance

ActivityMaintained

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

x-twitter A
io.veezee
X (formerly Twitter) posts, profiles, and search for AI agents. Free key, self-minted, no signup.
Social Media Search
2
twitter D
com.jojapi
X (formerly Twitter): X (formerly Twitter) public and private data API for search, posts (Tweets).
Social Media Search
321
SocialDataX X / Twitter MCP A
com.52choujiang
X / Twitter public post, comment, reply, user, and search tools.
Social Media Search
161
twitter-x-aio C
com.jojapi
Twitter: Access real-time Twitter/X data as soon as it's posted! With the Twitter/X AIO API, you.
Social Media Communication
231

Related MCP Servers

X (Twitter) MCP Server
Social Media Communication
Dishant27
A
license
Not graded
quality
D
maintenance
Enables interaction with X (formerly Twitter), allowing for posting tweets, searching content, managing accounts, and organizing lists.
Updated a year ago (2025-04-06 07:59 UTC)
25
3
MIT
X (Twitter) MCP
Social Media Communication
arnaldo-delisio
A
license
Not graded
quality
D
maintenance
Enables interaction with X (Twitter) to post tweets, threads, and replies while retrieving tweet metrics and account information. It supports core management tasks like deleting tweets and verifying authentication through the Twitter API.
Updated 9 months ago (2025-12-09 15:19 UTC)
MIT
mcp-x
Social Media Marketing
Lyonsupernova
A
license
B
quality
D
maintenance
Enables posting tweets to X (Twitter) via the X API v2, using Claude.
Updated 2 years ago (2024-12-28 01:57 UTC)
1
7
MIT
agent-twitter-client-mcp
Social Media Communication
theo-nash
A
license
B
quality
D
maintenance
Enables AI models to interact with Twitter, including posting tweets, searching, following users, and chatting with Grok, using cookie or credential authentication.
Updated a year ago (2025-04-27 18:13 UTC)
14
1,310
1
MIT

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/RongleCat/x-api'

If you have feedback or need assistance with the MCP directory API, please join our Discord server