← Back to directory
X

XActions

Community
The complete X/Twitter automation toolkit: scrape, post, schedule, analyze, engage. No API key required.
Category
Other #209 of 230
Stars
★ 583 Very popular
Transport
stdio (local process)
Runtime
Node.js · Docker · Hosted (no local runtime)
Credentials
Optional API key
License
Apache-2.0
Last commit
Tools
82
34FMRS · D

XActions is a feature-rich, free, open-source MCP server for X/Twitter automation, providing 145+ tools that cover a wide range of operations. It bypasses the official API via browser automation, which eliminates the need for API keys but introduces potential compliance risks. It is excellent for individual developers and small projects due to its cost-effectiveness; however, it is less suitable for enterprise or compliance-heavy scenarios. Overall, it is a powerful and flexible tool, but users should be cautious about usage frequency to avoid account risks.

Strongest · Setup experience 8/20 Weakest · Security and permissions 4/20

Reliability
6/20
Security and permissions
4/20
Maintenance
8/20
Documentation
8/20
Setup experience
8/20
Why each score
Reliability 6/20
The repository and manifest claim 145 tools, but the manifest only shows a package reference without evidence of actual tool definitions. There are no committed tests or CI workflows that verify the server's key paths, so the static calibration limits the score. The README claims no-browser operation, but the client config only lists optional cookie/username/password environment variables, lacking clear guidance on passing auth_token. Inconsistent claims and lack of verifiable execution evidence reduce confidence.
Security and permissions 4/20
The server performs browser automation for mass actions like follow/unfollow, like, comment, and post, which may violate X's ToS and risk accounts. Optional credentials are accepted, but no clear confirmation or scoping for destructive operations. The README includes a config example with an auth_token placeholder, but no real tokens are leaked. No security audit or permission model is present. These factors constitute a significant red-line risk: potential account compromise and ToS violation.
Maintenance 8/20
The repository is actively maintained with recent activity (stars, 17 issues, not archived), Apache-2.0 license, and version 3.4.4. The npm package exists. However, no release history or commit frequency is visible, and there is no explicit security response channel. Overall, maintenance is decent but lacks clear governance.
Documentation 8/20
The README is extensive with many examples and tutorials, covering installation, CLI usage, and MCP setup. However, it is contradictory: it claims 145 MCP tools but the remote HTTP deployment only lists 3. Tool parameters and limitations are not fully documented. There is a troubleshooting link, but it's not detailed. The documentation is comprehensive but not fully reliable.
Setup experience 8/20
The client config example is simple: npx -y xactions-mcp, but the environment variables listed (X_COOKIES, X_USERNAME, X_PASSWORD) do not match the README's instruction to set XACTIONS_SESSION_COOKIE or provide auth_token. The setup steps are not fully clear, and there is no guidance for Windows or other platforms. Docker is supported, but the static review finds setup partially straightforward but with missing details.

Static review · not runListed 2026-08-07

Read the FMRS scoring method →

Fit and risk

What it can accessUses the networkChanges third-party account dataControls a browser

Best for

  • Individual developers or small teams needing low-cost or zero-cost Twitter automation.
  • Developers wanting to integrate Twitter data into AI workflows.
  • Scraping projects that need fast Twitter data without official API access.
  • Personal brand managers looking to automate account growth (auto-follow, auto-like).

Not for

  • Enterprise applications that require stable and compliant official API access.
  • Users sensitive to automation risks or needing strict adherence to Twitter's terms of service.
  • Enterprises that need production-grade real-time data streams and advanced API features.
  • Organizations with strict compliance and security requirements, as browser automation may violate platform policies.

Required permissions

  • Requires access to X/Twitter authentication cookies (auth_token or X_COOKIES) to log in and perform actions.
  • May need username and password for login.
  • No access to local files or other system permissions.
  • When using browser automation, a browser instance runs locally in the background.

Risks and side effects

  • Using browser automation may violate X/Twitter's terms of service and could lead to account suspension or restrictions.
  • Automated activities may be detected by the platform's risk control systems.
  • The code explicitly states it is for educational and research purposes; use at your own risk.
  • Stolen cookies could compromise the account if not handled securely.

Setup

Before you start

Runtime:Node.js · Docker · Hosted (no local runtime)

XACTIONS_SESSION_COOKIE optionalsecret Session auth_token cookie from x.com, needed to unlock logged-in actions like search, follow, and posting (DevTools → Application → Cookies).
X_COOKIES optionalsecret X/Twitter auth cookies as a JSON string or a path to a cookies file.
X_PASSWORD optionalsecret X/Twitter password used for login.
X_AUTH_TOKEN optionalsecret auth_token from x.com cookies, needed for logged-in features such as the Spaces voice agent.
X_CT0 optionalsecret ct0 token from x.com cookies, used together with X_AUTH_TOKEN.
Other optional settings (1)
X_USERNAME optional X/Twitter username used for login.
  1. Ensure Node.js (>=18) is installed.
  2. Run the MCP server using npx: npx -y xactions-mcp.
  3. Configure your MCP client (like Claude Desktop) with the following JSON in its config file:

{
"mcpServers": {
"xactions": {
"command": "npx",
"args": ["-y", "xactions-mcp"],
"env": {
"XACTIONS_SESSION_COOKIE": "your_auth_token_here"
}
}
}
}

  1. Optionally, log in to x.com, copy the auth_token cookie and set it as an environment variable.
claude_desktop_config.json
{
  "mcpServers": {
    "xactions": {
      "command": "npx",
      "args": [
        "-y",
        "xactions-mcp"
      ],
      "env": {
        "XACTIONS_SESSION_COOKIE": "your_auth_token_here"
      }
    }
  }
}

Shown for Claude Desktop. Other clients may use a different file or key (VS Code uses "servers") — the configurator below converts it.

.vscode/mcp.json
{
  "servers": {
    "xactions": {
      "command": "npx",
      "args": [
        "-y",
        "xactions-mcp"
      ],
      "env": {
        "XACTIONS_SESSION_COOKIE": "your_auth_token_here"
      }
    }
  }
}

Goes in your project's .vscode/mcp.json (VS Code uses a "servers" key).

Terminal
claude mcp add xactions -e XACTIONS_SESSION_COOKIE=your_auth_token_here -- npx -y xactions-mcp

Run it in a terminal; replace any <…> placeholders with your own values first.

Check that it works

The client's tool list should show xactions tools such as x_get_profile; calling x_get_profile for nasa (or running npx xactions profile nasa) and getting a real profile back confirms the connection.

Troubleshooting

  1. Ensure the auth_token is correctly obtained by checking cookies in x.com's DevTools.
  2. Check Node.js version (>=18) if commands fail to run.
  3. If tool calls fail, try re-logging in or updating the cookie.
  4. For large operations, add appropriate delays (2-5 seconds) to avoid rate limits.
  5. If you encounter 'module not found', try `npx -y xactions-mcp` to force the latest version.

Things to try

Once connected, you can ask your AI assistant things like:

  • Look up NASA's X profile and follower count
  • Find everyone I follow who doesn't follow me back, sorted by follower count
  • Post a tweet saying our new version is live
  • Analyze the engagement of @elonmusk's last 50 tweets

Tools 82

x_get_profile read-only
Fetches public profile information for a given user.
x_get_followers read-only
Retrieves the list of followers for a user.
x_get_following read-only
Retrieves the list of users a user follows.
x_get_tweets read-only
Fetches tweets from a user.
x_search_tweets read-only
Searches for tweets.
x_get_thread read-only
Fetches the full content of a tweet thread.
x_download_video read-only
Extracts video download URLs from a tweet.
x_get_replies read-only
Fetches replies to a tweet.
Show 74 more tools
x_get_hashtag read-only
Fetches tweets under a hashtag.
x_get_likers read-only
Fetches users who liked a tweet.
x_get_retweeters read-only
Fetches users who retweeted a tweet.
x_get_media read-only
Fetches media posts by a user.
x_get_mentions read-only
Fetches tweets mentioning a user.
x_get_quote_tweets read-only
Fetches tweets quoting a given tweet.
x_get_likes read-only
Fetches tweets liked by a user.
x_get_recommendations read-only
Fetches recommended users.
x_detect_unfollowers read-only
Detects users who have unfollowed you.
x_analyze_sentiment read-only
Analyzes sentiment of tweets or topics.
x_best_time_to_post read-only
Analyzes the best time to post.
x_competitor_analysis read-only
Analyzes competitor social media performance.
x_brand_monitor read-only
Monitors brand mentions and sentiment.
x_audience_insights read-only
Gets audience insights.
x_engagement_report read-only
Generates engagement reports.
x_crypto_analyze read-only
Analyzes cryptocurrency-related tweets.
x_follow writes
Follows a user.
x_unfollow writes
Unfollows a user.
x_like writes
Likes a tweet.
x_post_tweet writes
Posts a tweet.
x_post_thread writes
Posts a thread of tweets.
x_reply writes
Replies to a tweet.
x_retweet writes
Retweets a tweet.
x_quote_tweet writes
Quotes a tweet.
x_bookmark writes
Bookmarks a tweet.
x_send_dm writes
Sends a direct message.
x_create_poll writes
Creates a poll.
x_delete_tweet destructive
Deletes a tweet.
x_auto_follow writes
Automatically follows users matching criteria.
x_follow_engagers writes
Follows users who engage with your tweets.
x_unfollow_all destructive
Unfollows all users.
x_smart_unfollow destructive
Smart unfollow: unfollows users after a certain number of days or criteria.
x_auto_comment writes
Automatically comments on tweets.
x_auto_retweet writes
Automatically retweets matching tweets.
x_auto_like writes
Automatically likes matching tweets.
x_unfollow_non_followers destructive
Unfollows users who don't follow you back.
x_analyze_voice read-only
Analyzes a user's writing style.
x_generate_tweet read-only
Generates tweet suggestions.
x_summarize_thread read-only
Summarizes a tweet thread.
x_rewrite_tweet read-only
Rewrites a tweet.
x_detect_bots read-only
Detects bot accounts.
x_find_influencers read-only
Finds influencers.
x_smart_target read-only
Smart targeting for potential followers.
x_grok_analyze_image read-only
Analyzes images using Grok.
x_monitor_account read-only
Monitors a specific account.
x_monitor_keyword read-only
Monitors a specific keyword.
x_follower_alerts read-only
Alerts for new followers.
x_track_engagement read-only
Tracks engagement metrics.
x_monitor_reputation read-only
Monitors reputation.
x_stream_start read-only
Starts a real-time data stream.
x_workflow_create writes
Creates a workflow.
x_workflow_run writes
Runs a workflow.
x_workflow_list read-only
Lists workflows.
x_workflow_actions read-only
Performs workflow actions.
x_persona_create writes
Creates a persona.
x_persona_run writes
Runs a persona.
x_persona_edit writes
Edits a persona.
x_persona_list read-only
Lists personas.
x_persona_presets read-only
Gets persona presets.
x_export_account read-only
Exports account data.
x_migrate_account writes
Migrates account data.
x_diff_exports read-only
Compares exported data.
x_import_data writes
Imports data.
x_convert_format read-only
Converts data formats.
x_get_spaces read-only
Discovers live Spaces.
x_scrape_space read-only
Scrapes Space metadata.
x_space_join writes
Joins a Space as an AI voice agent.
x_space_leave writes
Leaves the active Space and returns a session summary.
x_space_status read-only
Gets agent status in the active Space.
x_space_transcript read-only
Gets recent transcriptions from the active Space.
x_graph_build read-only
Builds a social graph.
x_graph_analyze read-only
Analyzes a social graph.
x_graph_recommendations read-only
Generates recommendations based on the graph.
x_graph_list read-only
Lists graphs.

Use cases

Automate X/Twitter account management, like mass unfollowing, auto-liking, auto-following.
Scrape and analyze tweets, profiles, and hashtags for market research or social listening.
Let AI agents (like Claude) perform complex Twitter operations as instructed, e.g., generating tweets, analyzing competitors.
Monitor keywords, accounts, and engagement in real-time and get alerts.
Deploy AI voice agents in X Spaces for interactive audio conversations.

Supported clients

Claude Desktop
Cursor
Windsurf

Listed from the project's documentation, not tested by this site.

Overview

XActions is an open-source, free MCP server for X/Twitter automation, offering 145+ tools across categories like scraping, analysis, actions, automation, AI, monitoring, workflows, personas, portability, Spaces, and social graph. It works without an API key by using browser automation instead of the official API, and provides multiple interfaces: CLI, Node.js library, browser scripts, and browser extension. This server enables AI agents like Claude or GPT to directly interact with X/Twitter, including fetching profiles, searching tweets, following/unfollowing, posting, sentiment analysis, and keyword monitoring.

Similar servers

BioMCP 75 · B

One binary. One grammar. Evidence from the biomedical sources you already trust.

★ 654 · Tools 11 Compare with this →

Source revision b9c4bf7bd680 Data synced 2026-10-12 Read the FMRS scoring method