ExTweets

Agentic X/Twitter Tools

A remote MCP surface for agents that need authorized X/Twitter actions and Grok-backed research without scraping around login walls.

Connect MCP If you're an agent, start with llms.txt.

OAuthNo shared static token

Multi-accountPersonal and brand handles

GrokX and web research tools

remote-mcp

server = "https://extweets.com/mcp"
auth   = "oauth"
docs   = "https://extweets.com/guide.md"

tools  = [
  "ask_grok_x",
  "search_tweets",
  "post_tweet",
  "list_x_accounts"
]

MCP endpoint

Give this URL to an OAuth-capable MCP client.

OAuth-capable MCP clients connect to this endpoint, discover the auth server, send the human through authorization, and receive tokens automatically.

https://extweets.com/mcp

1. Add the MCP URL

Use https://extweets.com/mcp in an MCP client that supports OAuth authorization.

2. Approve OAuth

The client opens the authorization flow and receives its own access token from /token.

3. Agents use tools

Agents call list_x_accounts first and pass account when more than one handle is connected.

There is no static token to copy in the current flow. A dashboard-managed token flow is planned for clients that need manual credentials.

Available tools

Research, read, and act from connected accounts.

Research tools are separate from account actions. Public writes, DMs, follows, and paid usage need enforceable limits, not just polite instructions to agents.

Grok research

ask_grok_xAsk Grok to research current X/Twitter posts using xAI X Search.
ask_grok_webAsk Grok to research the web using xAI Web Search.

Connected accounts

list_x_accountsList the X/Twitter accounts connected to the current MCP user.
set_default_x_accountChoose which connected account is used when no account is specified.

Read and search

search_tweetsSearch recent posts with standard X search syntax.
get_tweetFetch one post by ID.
get_user_profileLook up a public profile by username.
get_my_profileInspect the selected connected account.
get_user_timelineFetch recent posts from a public user timeline.
get_home_timelineFetch the selected account's home timeline.
get_bookmarksFetch bookmarks for the selected connected account.

Account actions

post_tweetPost from a selected connected account.
reply_to_tweetReply from a selected connected account.
delete_tweetDelete a post from a selected connected account.
like_tweetLike a post from a selected connected account.
unlike_tweetRemove a like from a selected connected account.
follow_userFollow a user from a selected connected account.
unfollow_userUnfollow a user from a selected connected account.
bookmark_tweetBookmark a post from a selected connected account.
unbookmark_tweetRemove a bookmark from a selected connected account.
send_dmSend a direct message from a selected connected account.

Safety model

Protect the connected accounts and constrain the agents using them.

Revocable OAuth

X/Twitter access is granted by the user, can be disconnected from ExTweets, and can be revoked from X account settings.

Token custody

Connection tokens are encrypted in D1, never returned to MCP tools, and are separate from short-lived OAuth login state.

No shared secret

OAuth-capable MCP clients receive their own access token through the redirect flow, so humans do not paste a reusable account secret.

Scoped clients

Each MCP client should be constrained by allowed tools, connected accounts, write permissions, DM/follow/delete access, and spending limits.

Action limits

Write-rate ceilings, daily caps, high-risk action gates, and anomaly locks limit damage if an authorized agent behaves badly.

Audit and revoke

Tool calls should be logged with client, account, target, cost, and result, with instant dashboard revocation for clients and accounts.