
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
x-developer
Advanced tools
Xquik agent skill & plugin bundle for REST, MCP, webhooks, exports & confirmation-gated X workflows. Not affiliated with X Corp.
Xquik is an independent third-party service. Not affiliated with X Corp. "Twitter" and "X" are trademarks of X Corp.
Featured in Framer Watch Connect Framer to Claude Code, Codex, Cursor, and more at 6:07 to see Xquik MCP in action. |
Xquik provides 128 REST API operations for structured X data and approved account automation. It includes search, profiles, followers, media, communities, trends, monitors, webhooks, exports, MCP, and SDKs.
The npm package x-developer contains this Skill and plugin bundle. The separate x-twitter-scraper package is the TypeScript SDK.
The x-developer bundle is v2.6.4. Hosted MCP v2.6.0 exposes 120 catalog
routes through 2 tools.
Of these, 119 support JSON or text. Binary support downloads use REST. Add
https://xquik.com/mcp. Current clients negotiate MCP 2026-07-28 through
server/discover. Modern calls need no initialization session. Stateless
2025-era clients remain compatible. Follow the
client compatibility guide.
OAuth-capable clients use OAuth 2.1. ChatGPT custom apps require OAuth.
Eight credential, checkout, or guest-wallet
operations remain outside MCP.
Codex OAuth compatibility: Affected Codex releases discard the RFC 9207
isscallback value even though Xquik returns it. If Codex reportsAuthorization server response missing required issuer: expected https://xquik.com, useXQUIK_API_KEYthrough the Codexbearer_token_env_varsetting. Follow the Codex OAuth troubleshooting guide and track openai/codex#31573.
Xquik bills delivered results for supported filtered workflows. Supported
filters run before billing, so excluded rows are not delivered-result charges.
Compare alternatives with the same query, filters, fields, and row count. Use
POST /extractions/estimate before each bulk job.
XQUIK_API_KEY. They never need X passwords, 2FA codes,
cookies, or session exports. Plan and credit changes stay in the Xquik dashboard.Install via the skills CLI (auto-detects your installed agents):
npx skills@1.5.3 add Xquik-dev/x-twitter-scraper
This installs the primary x-twitter-scraper skill, including SKILL.md and every file in references/.
Use manual installation only when the skills CLI is unavailable. Copy the primary skill directory, not the repository root.
target_dir=".agents/skills/x-twitter-scraper"
tmp_dir="$(mktemp -d)"
git clone --depth 1 https://github.com/Xquik-dev/x-twitter-scraper.git "$tmp_dir/x-twitter-scraper"
rm -rf "$target_dir"
mkdir -p "$(dirname "$target_dir")"
cp -R "$tmp_dir/x-twitter-scraper/skills/x-twitter-scraper" "$target_dir"
rm -rf "$tmp_dir"
Target directories:
.agents/skills/x-twitter-scraper.claude/skills/x-twitter-scraper.windsurf/skills/x-twitter-scraper.roo/skills/x-twitter-scraper.continue/skills/x-twitter-scraper.goose/skills/x-twitter-scraper| Resource | Endpoints |
|---|---|
| X Lookups | Tweet, article, search, user profile, user tweets, user likes, user media, favoriters, followers you know, follow check, download media, and confirmation-gated private reads |
| Extractions | Create (23 types), estimate, list, get results, export |
| Monitors | Create with confirmation, list, get, update, delete |
| Events | List (filtered, paginated), get single |
| Webhooks | Create with destination confirmation, list, update, delete, test, deliveries |
| Trends | Regional trending topics |
| Radar | Trending topics & news from supported sources |
| Draws | Create with filters, list, get with winners, export |
| Styles | Analyze, save, list, get, delete, compare, performance |
| Compose | Tweet composition (compose, refine, score) |
| Drafts | Create, list, get, delete |
| Account | Get account, update locale, set X identity |
| Credits | Get balance |
| API Keys | Create, list, revoke |
| X Accounts | List, get, and disconnect already-connected accounts; dashboard handles connection and re-authentication |
| X Write | Confirmation-gated tweet, delete, like, unlike, retweet, follow, unfollow, DM, profile, avatar, banner, media upload, communities |
| Support | Create, list, get, update, reply, and download attachments |
| Repo | Language | Install |
|---|---|---|
| x-twitter-scraper-typescript | TypeScript / Node.js | npm i x-twitter-scraper |
| x-twitter-scraper-python | Python | pip install x-twitter-scraper |
| x-twitter-scraper-go | Go | go get github.com/Xquik-dev/x-twitter-scraper-go |
| x-twitter-scraper-ruby | Ruby | gem install x-twitter-scraper |
| x-twitter-scraper-java | Java | Build from source while Maven Central publication is pending |
| x-twitter-scraper-kotlin | Kotlin | Build from source while Maven Central publication is pending |
| x-twitter-scraper-csharp | C# / .NET | dotnet add package XTwitterScraper |
| x-twitter-scraper-php | PHP | composer require xquik/x-twitter-scraper |
| x-twitter-scraper-cli | CLI | Build from source or install a pinned release tag |
| terraform-provider-x-twitter-scraper | Terraform | Build from source (release page) |
MIT
Xquik is an independent third-party service. Not affiliated with X Corp. "Twitter" and "X" are trademarks of X Corp.
FAQs
Xquik agent skill & plugin bundle for REST, MCP, webhooks, exports & confirmation-gated X workflows. Not affiliated with X Corp.
The npm package x-developer receives a total of 279 weekly downloads. As such, x-developer popularity was classified as not popular.
We found that x-developer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.