🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@twitterapis/mcp

Package Overview
Dependencies
Maintainers
1
Versions
12
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@twitterapis/mcp

Official MCP server for twitterapis.com, the Twitter/X API (search, users, followers, tweets, threads, lists, likes, bookmarks, DMs) plus write actions (post/like/retweet/follow) as native tools for Claude, Cursor, and any MCP client.

latest
Source
npmnpm
Version
0.6.4
Version published
Weekly downloads
54
-80.51%
Maintainers
1
Weekly downloads
 
Created
Source

@twitterapis/mcp

npm version npm downloads license

Official Model Context Protocol server for twitterapis.com, the Twitter / X API as native tools for Claude, Cursor, Windsurf, and any MCP client. Reads (search, profiles, timelines, followers, DMs) plus write actions (post, like, retweet, follow).

Ask your agent to search tweets, pull a user's profile or timeline, list followers/following, fetch thread context, or enumerate list members and it calls the API directly. Every tool maps to a REST endpoint at https://api.twitterapis.com; the server holds no state and forwards your API key on each call.

Quick start

No install needed. Run with npx. You need one thing: an API key (free $0.50 in credits, no card required): twitterapis.com/signup.

Setup

Claude Desktop

Edit claude_desktop_config.json (Settings → Developer → Edit Config):

{
  "mcpServers": {
    "twitterapis": {
      "command": "npx",
      "args": ["-y", "@twitterapis/mcp@latest"],
      "env": { "TWITTERAPIS_KEY": "YOUR_API_KEY" }
    }
  }
}

Restart Claude Desktop. The twitter_* tools appear in the tool picker.

Cursor

~/.cursor/mcp.json (or Settings → MCP → Add New Server):

{
  "mcpServers": {
    "twitterapis": {
      "command": "npx",
      "args": ["-y", "@twitterapis/mcp@latest"],
      "env": { "TWITTERAPIS_KEY": "YOUR_API_KEY" }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "twitterapis": {
      "command": "npx",
      "args": ["-y", "@twitterapis/mcp@latest"],
      "env": { "TWITTERAPIS_KEY": "YOUR_API_KEY" }
    }
  }
}

VS Code (Copilot / agent mode)

.vscode/mcp.json in your workspace, or the user-level MCP settings:

{
  "servers": {
    "twitterapis": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@twitterapis/mcp@latest"],
      "env": { "TWITTERAPIS_KEY": "YOUR_API_KEY" }
    }
  }
}

Configuration

Env varRequiredDefaultPurpose
TWITTERAPIS_KEYYes(none)API key from dashboard
TWITTERAPIS_BASE_URLNohttps://api.twitterapis.comOverride the API host
TWITTERAPIS_TIMEOUT_MSNo30000Per-request timeout in milliseconds

Tools

51 tools: 37 reads and 14 write actions. Most user endpoints accept username (handle without @) or user_id (twitter_user_likes and twitter_user_tweets_complete require user_id); tweet endpoints accept id or url; paginated endpoints return a cursor you pass back to get the next page. Two of the reads are free account/billing lookups (twitter_account_me, twitter_account_payments).

Public reads (search, profiles, tweets, followers, likes) work with just your API key. The account-only reads (bookmarks, DMs, home timeline, followers-you-know) and all write actions act AS an authenticated X account, so they need a session linked to your key first (returns HTTP 409 until then). Link a session either by registering your x.com cookies (twitter_customer_session) or by logging in with a username/password (twitter_user_login). Alternatively, pass per-call inline credentials on any of those tools (auth_token + ct0, with optional proxy_url / user_agent) to act AS that account for a single call without pre-registering a session, so one API key can act as many accounts. For write actions, set proxy_url to a residential proxy, since X soft-blocks writes that egress from datacenter IPs. Each write tool is annotated readOnlyHint: false; reversing actions (delete, unfollow, unlike, unretweet, unbookmark) are annotated destructiveHint: true so MCP clients can prompt before running them.

Reads

ToolWhat it does
twitter_advanced_searchSearch tweets with X operators (from:, min_faves:, since:, filter:links, etc.)
twitter_user_searchFind user accounts by name or keyword
twitter_user_infoFull profile by handle (bio, counts, verification, location)
twitter_user_info_by_idFull profile by numeric user id
twitter_users_by_idsUp to 100 numeric user ids resolved to full profiles in one call
twitter_user_aboutA user's structured About object (category, professional/business labels, verification + identity-verification flags, joined date, and X's 'About this account' transparency panel)
twitter_user_affiliatesAccounts affiliated with an organization profile
twitter_check_follow_relationshipFollow relationship between two user ids (who follows whom)
twitter_user_tweetsA user's recent original tweets (replies excluded)
twitter_user_tweets_and_repliesA user's full timeline (tweets + replies)
twitter_user_tweets_completeA user's near-complete tweet history in one auto-paginated call
twitter_user_mediaImages and videos a user has posted
twitter_user_mentionsRecent public tweets mentioning a user
twitter_user_likesTweets a user has liked (public Likes tab)
twitter_user_followersAccounts that follow a user
twitter_user_followingAccounts a user follows
twitter_user_followers_v2Followers with the v2 response shape (richer fields, deeper cursoring)
twitter_user_following_v2Following with the v2 response shape (richer fields, deeper cursoring)
twitter_user_verified_followersA user's verified followers only
twitter_followers_you_knowFollowers of a target that your authenticated account also follows
twitter_tweet_detailSingle tweet: text, author, metrics, media, quoted/reply context
twitter_tweet_repliesReplies to a tweet
twitter_tweet_threadFull author thread (connected tweet chain by same author)
twitter_tweet_retweetersAccounts that retweeted a tweet
twitter_list_membersMembers of a Twitter/X List
twitter_home_timelineYour authenticated account's Home timeline (session)
twitter_bookmarksYour authenticated account's bookmarks (session)
twitter_blockingAccounts your authenticated account has blocked (your own list only) (session)
twitter_mutingAccounts your authenticated account has muted (your own list only) (session)
twitter_bookmark_searchFull-text search within your bookmarks (session)
twitter_dm_listYour DM conversations (inbox), read-only (session)
twitter_dm_conversationMessages in one DM conversation, read-only (session)
twitter_trendsCurrent top trends for a location (by country or woeid)
twitter_trends_locationsEvery location X has trends for, each with its WOEID
twitter_account_meYour twitterapis.com account: credits, usage, email (free)
twitter_account_paymentsYour twitterapis.com payment history (free)
twitter_media_statusProcessing state of an uploaded media_id; poll until succeeded before attaching video or GIF (session)

Write actions (require a linked X session)

ToolWhat it does
twitter_create_tweetPost a tweet; set reply_to to reply or quote to quote-tweet
twitter_delete_tweetDelete one of your tweets (irreversible)
twitter_favorite_tweet / twitter_unfavorite_tweetLike / unlike a tweet
twitter_retweet / twitter_unretweetRetweet / undo retweet
twitter_bookmark_tweet / twitter_unbookmark_tweetBookmark / remove bookmark
twitter_follow_user / twitter_unfollow_userFollow / unfollow a user by id
twitter_dm_sendSend a Direct Message to a user by their numeric recipient_id
twitter_media_uploadUpload a base64 image, returns a media_id for twitter_create_tweet

Session setup

Link an X account to your key once, so the account-only reads and write actions act as it (or pass per-call auth_token/ct0 instead).

ToolWhat it does
twitter_customer_sessionRegister your x.com session cookies (auth_token + ct0) against your key
twitter_user_loginLog in with username + password (+ totp_secret for 2FA); stores the session against your key. Returns a confirmation, never the cookies

Usage examples

"Find the most popular tweets about AI agents posted this week"

The agent calls twitter_advanced_search with:

query: "AI agents min_faves:200 since:2024-01-01"
product: "Top"
count: 20

Pull a user's recent posts

"Get the last 10 tweets from @sama"

The agent calls twitter_user_tweets with:

username: "sama"
count: 10

Read a full thread

"Get the full thread for this tweet: https://x.com/karpathy/status/1849....."

The agent calls twitter_tweet_thread with:

url: "https://x.com/karpathy/status/1849....."

Paginate through followers

"List the first 100 followers of @openai, then the next 100"

First call, twitter_user_followers: { username: "openai", count: 100 } Second call, pass back the cursor from the first response: { username: "openai", count: 100, cursor: "<cursor from response>" }

Monitor brand mentions

"Show me recent tweets mentioning @twitterapis"

The agent calls twitter_user_mentions with:

username: "twitterapis"
count: 50

Troubleshooting

HTTP 401 (invalid or missing API key) Check that TWITTERAPIS_KEY is set correctly in your MCP client config and matches the key shown in your dashboard.

HTTP 402 (insufficient credits) Top up at twitterapis.com/dashboard. Your first $0.50 is free at signup.

HTTP 403 (access forbidden) The account or tweet may be private/protected, or your plan does not include this endpoint.

HTTP 404 (not found) The user, tweet, or list may have been deleted, suspended, or the id/handle is wrong.

HTTP 429 (rate limited) Wait a few seconds and retry. If you hit this frequently, add "TWITTERAPIS_TIMEOUT_MS": "60000" to your env config and space out bulk requests.

Request failed: timed out after 30000ms The default timeout is 30 s. For large paginated fetches set TWITTERAPIS_TIMEOUT_MS to a higher value (e.g. 60000).

Tools do not appear in Claude / Cursor Ensure npx is on your PATH and Node.js 18+ is installed (node --version). Check MCP client logs for startup errors.

Pricing

Calls are billed to your twitterapis.com account. Almost every endpoint is $0.0008/call: all reads (search, profiles, tweets, followers, likes) plus the simple write actions (like, retweet, bookmark, follow and their undos, delete). At the read rate that works out to $0.04 per 1,000 tweets, since each call returns about 20 tweets. The premium endpoints cost a little more: tweet creation, sending a DM (twitter_dm_send), and DM reads (twitter_dm_list, twitter_dm_conversation) at $0.0016/call, full tweet history (twitter_user_tweets_complete) at $0.0024/call, and a full tweet thread (twitter_tweet_thread) at $0.004/call. Your first $0.50 is free. See twitterapis.com/pricing.

FAQ

Do I need an X (Twitter) developer account? No. Get an API key at twitterapis.com/signup; there is no application or approval step.

Is it read-only? No. 37 read tools work with just your API key; 14 write actions (post, like, retweet, follow, DM, media upload) act as a linked X account or per-call inline credentials.

Which clients are supported? Claude Desktop, Cursor, Windsurf, and VS Code (Copilot agent mode), or any Model Context Protocol client.

How is it billed? Per request. New keys start with $0.50 in free credits, no card required. See pricing.

Does it store my key or data? No. The server holds no state and forwards your API key on each call.

Maintainers

src/tools.js is generated. Do not edit it. The catalog is built at build time from two committed inputs:

  • test/openapi.snapshot.json, a vendored copy of the published OpenAPI spec, which supplies the structure: which endpoints exist, which parameters each accepts, whether a parameter is required, and its type.
  • scripts/tools.overrides.mjs, hand-authored, which supplies everything the spec cannot express: the tool and argument descriptions a model reads to decide how to call a tool, the cross-field rules ("provide exactly one of username or user_id"), the per-call credential arguments that travel as x-* headers, and the write / destructive / JSON-body flags.

The spec is vendored on purpose. Nothing is fetched at install time or at server boot, so the published package is a fixed artifact rather than one that depends on a hostname still answering.

npm run openapi:refresh   # re-vendor the spec, prints the route diff
npm run build             # regenerate src/tools.js
npm test                  # gates, incl. "src/tools.js matches the generator"

npm test fails if src/tools.js was hand-edited or left stale, if the catalog and the live spec disagree, or if the tool list and this README disagree.

Directory listings

Where this server actually appears, and what each directory needs. A descriptor file sitting in the repo is not a listing, so this table records the listing, not the file. Checked 2026-08-02.

DirectoryStateWhat it takes
Official MCP Registrylisted as io.github.TwitterAPIs/twitterapis-mcpserver.json plus mcpName in the published package.json. Publish with mcp-publisher, authenticating with a GitHub token whose account is an org admin. Every release needs a fresh publish, since the registry pins a version.
Glamalisted, crawled automaticallyNothing to submit. Glama indexed the GitHub repo on its own. glama.json names the maintainer for the claim, but the claim itself is completed from a signed-in Glama account.
Smitherynot listedsmithery.yaml no longer does anything: the repo-linked build path was retired and the filename appears nowhere in Smithery's current docs. Listing now means publishing either a public Streamable HTTP endpoint or a prebuilt MCPB bundle, both from a Smithery account with an API key.

Two traps worth keeping in mind. The registry enforces description at 100 characters and title at 100; test/registry-manifests.mjs pins both, because the descriptors passed an earlier version of that gate while the registry rejected them with HTTP 422. And mcpName is verified against the tarball on npm, not against the working tree, so a wrong value is only visible after the release has shipped and costs another version to correct.

License

MIT

Keywords

mcp

FAQs

Package last updated on 02 Aug 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts