Skip to content

v0.0.2

Choose a tag to compare

View all tags
@SohrabZ SohrabZ released this 05 Aug 01:50
· 54 commits to main since this release
v0.0.2
af019ca
This commit was signed with the committer’s verified signature. The key has expired.
SohrabZ Sohrab Sheikhani
GPG key ID: 4AF545C13E0C2E9C
Expired
Verified
Learn about vigilant mode.

Browser-backed MCP server for X. Reads and posts from your own logged-in
Chrome profile — no X API key, no developer account, no per-request billing.

Install

go install github.com/SohrabZ/x-browser-mcp@v0.0.2
x-browser-mcp
curl -X POST http://127.0.0.1:18110/api/v1/login/start

Sign in once in the window that opens, then fully quit it.

Read tools

read_x_url · check_login_status · start_login · read_home_timeline ·
search_x · read_user_posts · read_thread · read_bookmarks · read_list

read_x_url takes any x.com link and resolves it — a post reads its thread, a
profile reads that account, and list, bookmarks, home and search URLs read their
timelines. It accepts what people actually copy, including the ?s= tracking
parameter on share links.

Write tools

post_to_x · reply_to_post · like_post · repost_post · bookmark_post

Disabled unless started with -allow-writes. When disabled they are not
registered at all, so a connected model cannot see or call them. When enabled,
each requires a confirmation token printed to the operator's terminal at
startup — the read tools pull attacker-authored post text into the same context
that can act on your account, and text scraped from a web page cannot supply a
token it has never seen. Writes also get their own tighter budget, an
append-only audit log, and nothing destructive: no delete, unfollow, block or DM.

Notes

  • Binds to 127.0.0.1 by default. The API is unauthenticated; keep it there.
  • Session state lives in ~/.x-browser-mcp/ at mode 0700.
  • Reads are paced (15s apart, 8 per 10 minutes) to avoid tripping X.
  • On macOS, do not run this from a launchd agent: Chrome cannot reach the
    login Keychain there and will destroy the saved session on every run.

Requires Go 1.25+ and Google Chrome.

Assets 2
Loading