45
grade D
10 days ago
glama
XMCP
A comprehensive MCP server for X/Twitter featuring over 70 tools for research, engagement, and publishing with granular permission-based access control. It includes specialized Playwright-powered tools for fetching X articles and supports extensive account management and thread operations.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 5 credentials: TWITTER_ACCESS_TOKEN, TWITTER_ACCESS_TOKEN_SECRET, TWITTER_API_KEY, TWITTER_API_SECRET, TWITTER_BEARER_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
TWITTER_ACCESS_TOKEN— "": "your_token",🔐 secret
TWITTER_ACCESS_TOKEN_SECRET— "": "your_token_secret",🔐 secret
TWITTER_API_KEY— "": "your_key",🔐 secret
TWITTER_API_SECRET— "": "your_secret",🔐 secret
TWITTER_BEARER_TOKEN— "": "your_bearer",// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/vibeforge1111-xmcp-4qfdt9)commit: 042b131a612293f925ef448c2f86845707d35ea6
code hash: 1ff2311c162f23ea29779971d927e94adb49cc379c9531c2dbfa86e5c9cc01af
verified: 4/11/2026, 3:11:24 PM