<< All versions
Skill v1.0.0
currentAutomated scan96/100tpavanipradeep/everything-claude-code/x-api
──Details
PublishedOctober 13, 2026 at 09:22 PM
Content Hashsha256:f20c06afe00e5de4...
Git SHA4bdbf57d981f
──Files
Files (1 file, 5.4 KB)
SKILL.md5.4 KBactive
SKILL.md · 210 lines · 5.4 KB
version: "1.0.0" name: x-api description: X/Twitter API integration for posting tweets, threads, reading timelines, search, and analytics. Covers OAuth auth patterns, rate limits, and platform-native content posting. Use when the user wants to interact with X programmatically. origin: ECC
X API
Programmatic interaction with X (Twitter) for posting, reading, searching, and analytics.
When to Activate
- User wants to post tweets or threads programmatically
- Reading timeline, mentions, or user data from X
- Searching X for content, trends, or conversations
- Building X integrations or bots
- Analytics and engagement tracking
- User says "post to X", "tweet", "X API", or "Twitter API"
Authentication
OAuth 2.0 Bearer Token (App-Only)
Best for: read-heavy operations, search, public data.
bash
# Environment setupexport X_BEARER_TOKEN="your-bearer-token"
python
import osimport requestsbearer = os.environ["X_BEARER_TOKEN"]headers = {"Authorization": f"Bearer {bearer}"}# Search recent tweetsresp = requests.get("https://api.x.com/2/tweets/search/recent",headers=headers,params={"query": "claude code", "max_results": 10})tweets = resp.json()
OAuth 1.0a (User Context)
Required for: posting tweets, managing account, DMs.
bash
# Environment setup — source before useexport X_API_KEY="your-api-key"export X_API_SECRET="your-api-secret"export X_ACCESS_TOKEN="your-access-token"export X_ACCESS_SECRET="your-access-secret"
python
import osfrom requests_oauthlib import OAuth1Sessionoauth = OAuth1Session(os.environ["X_API_KEY"],client_secret=os.environ["X_API_SECRET"],resource_owner_key=os.environ["X_ACCESS_TOKEN"],resource_owner_secret=os.environ["X_ACCESS_SECRET"],)
Core Operations
Post a Tweet
python
resp = oauth.post("https://api.x.com/2/tweets",json={"text": "Hello from Claude Code"})resp.raise_for_status()tweet_id = resp.json()["data"]["id"]
Post a Thread
python
def post_thread(oauth, tweets: list[str]) -> list[str]:ids = []reply_to = Nonefor text in tweets:payload = {"text": text}if reply_to:payload["reply"] = {"in_reply_to_tweet_id": reply_to}resp = oauth.post("https://api.x.com/2/tweets", json=payload)tweet_id = resp.json()["data"]["id"]ids.append(tweet_id)reply_to = tweet_idreturn ids
Read User Timeline
python
resp = requests.get(f"https://api.x.com/2/users/{user_id}/tweets",headers=headers,params={"max_results": 10,"tweet.fields": "created_at,public_metrics",})
Search Tweets
python
resp = requests.get("https://api.x.com/2/tweets/search/recent",headers=headers,params={"query": "from:affaanmustafa -is:retweet","max_results": 10,"tweet.fields": "public_metrics,created_at",})
Get User by Username
python
resp = requests.get("https://api.x.com/2/users/by/username/affaanmustafa",headers=headers,params={"user.fields": "public_metrics,description,created_at"})
Upload Media and Post
python
# Media upload uses v1.1 endpoint# Step 1: Upload mediamedia_resp = oauth.post("https://upload.twitter.com/1.1/media/upload.json",files={"media": open("image.png", "rb")})media_id = media_resp.json()["media_id_string"]# Step 2: Post with mediaresp = oauth.post("https://api.x.com/2/tweets",json={"text": "Check this out", "media": {"media_ids": [media_id]}})
Rate Limits
X API rate limits vary by endpoint, auth method, and account tier, and they change over time. Always:
- Check the current X developer docs before hardcoding assumptions
- Read
x-rate-limit-remainingandx-rate-limit-resetheaders at runtime - Back off automatically instead of relying on static tables in code
python
import timeremaining = int(resp.headers.get("x-rate-limit-remaining", 0))if remaining < 5:reset = int(resp.headers.get("x-rate-limit-reset", 0))wait = max(0, reset - int(time.time()))print(f"Rate limit approaching. Resets in {wait}s")
Error Handling
python
resp = oauth.post("https://api.x.com/2/tweets", json={"text": content})if resp.status_code == 201:return resp.json()["data"]["id"]elif resp.status_code == 429:reset = int(resp.headers["x-rate-limit-reset"])raise Exception(f"Rate limited. Resets at {reset}")elif resp.status_code == 403:raise Exception(f"Forbidden: {resp.json().get('detail', 'check permissions')}")else:raise Exception(f"X API error {resp.status_code}: {resp.text}")
Security
- Never hardcode tokens. Use environment variables or
.envfiles. - Never commit `.env` files. Add to
.gitignore. - Rotate tokens if exposed. Regenerate at developer.x.com.
- Use read-only tokens when write access is not needed.
- Store OAuth secrets securely — not in source code or logs.
Integration with Content Engine
Use content-engine skill to generate platform-native content, then post via X API:
- Generate content with content-engine (X platform format)
- Validate length (280 chars for single tweet)
- Post via X API using patterns above
- Track engagement via public_metrics
Related Skills
content-engine— Generate platform-native content for Xcrosspost— Distribute content across X, LinkedIn, and other platforms