XActions

Name: XActions
Author: nirholas

作者：nirholas版本 3.5.0i★ –i在你的电脑上运行

注册名称io.github.nirholas/xactions

安装

概览

作者提供的说明（英文原文）

X/Twitter automation MCP: scrape, post, schedule, analyze, engage. No API key required.

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数：意见、测量和人气是不同的东西。

用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
我们的基础检查i1 项中通过 1 项依据公开信息检查；尚未扫描代码
使用情况i尚未统计★ –

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

连接方式: 在你的电脑上运行
传输方式: stdio
分类: 营销与社交媒体
你需要填写：X_COOKIES, X_PASSWORD

安装

选择你使用的 AI 应用，然后复制设置。

安装之前

基础检查：1 项中通过 1 项
在你的电脑上运行，拥有你的用户账户的权限（文件、网络、应用）。
需要你自己填写： X_COOKIES, X_USERNAME, X_PASSWORD

标为机密的值是你账户的钥匙。千万不要分享给别人，也不要粘贴到聊天里。

你需要

npm已安装 Node.js（用于 npx 命令）

你用的是哪个应用？

ClaudeClaude CodeCursorVS CodeChatGPT

在上方选择你的应用。我们会记住它，下次按钮会显示“安装到 …”。

打开 Claude Desktop → Settings → Developer → Edit Config，把下面的内容粘贴到 claude_desktop_config.json

{
  "mcpServers": {
    "xactions": {
      "command": "npx",
      "args": [
        "-y",
        "xactions"
      ],
      "env": {
        "X_COOKIES": "your-value",
        "X_USERNAME": "your-value",
        "X_PASSWORD": "your-value"
      }
    }
  }
}

在终端中运行这条命令

claude mcp add xactions --env X_COOKIES=your-value --env X_USERNAME=your-value --env X_PASSWORD=your-value -- npx -y xactions

运行前请先填写空着的值。

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "xactions": {
      "command": "npx",
      "args": [
        "-y",
        "xactions"
      ],
      "env": {
        "X_COOKIES": "your-value",
        "X_USERNAME": "your-value",
        "X_PASSWORD": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "xactions": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "xactions"
      ],
      "env": {
        "X_COOKIES": "your-value",
        "X_USERNAME": "your-value",
        "X_PASSWORD": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

这个服务器在你的电脑上运行，而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。

你的选择通过 Cookie 保存在这台设备上，无需账户。

需要你填写的值

X_COOKIES 机密 env
X/Twitter authentication cookies (JSON string or path to cookies file)
X_USERNAME env
X/Twitter username for login
X_PASSWORD 机密 env
X/Twitter password for login

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

它能做什么

它在你的电脑上运行；安装后，工具列表会显示在你的 AI 应用中。

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月7日

✓ 通过
作者与仓库一致
注册名称已通过 GitHub 账户 nirholas 验证，该账户拥有此仓库
… 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
… 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
– 不适用
端点有响应
它在你的电脑上运行，没有互联网端点
– 不适用
使用 OAuth 登录
在你的电脑上运行，改用本地设置
… 尚未检查
工具描述中没有隐藏指令
它在你的电脑上运行；我们只能读取互联网端点的工具列表

与“营销与社交媒体”中的其他服务器比较i

星标数多于此分类中其他 2972 个服务器的 0%
发布到注册中心的时间比此分类中其他 2972 个服务器的 27% 更新
基础检查结果等于或优于此分类中其他 2972 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

常见问题

XActions 安全吗？

它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前，请先看看这个服务器要求哪些权限，并使用只具备所需权限的密钥。

它需要哪些密钥或代码？

你需要填写：X_COOKIES, X_PASSWORD

它在我的电脑上运行还是在云端？

它在你的电脑上运行。你的 AI 应用会在需要时启动它，数据不会经过作者的服务器（除非它自己调用在线服务）。

它还在维护吗？

GitHub 仓库最后更新于–，最新版本（3.5.0）于3个月前进入注册中心。

哪些应用可以使用它？

支持 MCP 的应用，例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Node.js。

有什么可以替代它？

同一分类中有：MCP YouTube Transcript, Google Analytics MCP, BibiGPT YouTube Video Summarizer

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

MCP YouTube Transcript

作者：jkawamoto

An MCP server retrieving transcripts of YouTube videos

在你的电脑上运行★ 495MIT10天前更新

安装

Google Analytics MCP

作者：surendranb

GA4 MCP server for AI agents: schema discovery, server-side aggregation, analysis-ready defaults.

在你的电脑上运行★ 244MIT9天前更新

安装

BibiGPT YouTube Video Summarizer

作者：JimmyLv

AI video summarizer: summarize and transcribe YouTube, Bilibili, TikTok and podcast videos.

在云端运行★ 137MIT10天前更新

安装

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

██╗ ██╗ █████╗ ██████╗████████╗██╗ ██████╗ ███╗ ██╗███████╗ ╚██╗██╔╝██╔══██╗██╔════╝╚══██╔══╝██║██╔═══██╗████╗ ██║██╔════╝ ╚███╔╝ ███████║██║ ██║ ██║██║ ██║██╔██╗ ██║███████╗ ██╔██╗ ██╔══██║██║ ██║ ██║██║ ██║██║╚██╗██║╚════██║ ██╔╝ ██╗██║ ██║╚██████╗ ██║ ██║╚██████╔╝██║ ╚████║███████║ ╚═╝ ╚═╝╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═══╝╚══════╝

The complete X/Twitter automation toolkit

Scrapers · MCP Server for AI Agents · CLI · Browser Scripts · Browser Extension

No API keys. No monthly fees. 100% open source.

https://xactions.app

Website · npm · Docs · MCP Server · Docker · API Ref

⚡ Try it in 30 seconds

npx xactions profile nasa

⚡ @NASA

Name: NASA Bio: Making the seemingly impossible, possible. ✨ Location: Pale Blue Dot Website: http://www.nasa.gov/ Joined: 2007-12-19 Following: 117 Followers: 92.4M Tweets: 74.2K Listed: 0 ✓ Verified

No API key. No account. No browser. Real data in about a second.

npx xactions tweets nasa --limit 100 --output nasa.csv   # timeline to a spreadsheet

npx xactions login # unlock search, followers, DMs npx xactions search "your brand" --limit 50 # what people are saying

⚡ See it in action

🏆 How XActions Compares

Why build with XActions instead of the alternatives?

Feature	XActions	twikit	twscrape	x-use	xmcp (official)	bird	twitter-cli	Agent-Reach
No API Key Required	✅	✅ Cookies	✅ Account pool	✅ Browser	❌ X API keys	✅ Cookies	❌ X API keys	✅
MCP Server (AI agents)	✅ 154 tools	❌	❌	✅ (33-tool server)	✅ (140-tool, metered)	❌	❌	❌ Skills, not MCP
Browser Console Scripts	✅ 95	❌	❌	❌	❌	❌	❌	❌
AI Voice Agent in Spaces	✅ Join, listen, speak	❌	❌	❌	❌	❌	❌	❌
CLI	✅ 56 commands	❌	✅	❌	❌	✅	✅	✅
Human approval gate on writes	✅ Every write held as a draft	❌	❌	✅	❌	❌	❌	❌
Daily action caps that survive a restart	✅ Per account, on disk	❌	❌	✅	❌	❌	❌	❌
Account pool with rotation	✅ SQLite, per-operation windows	❌	✅	❌	❌	❌	❌	❌
Resumable long scrapes	✅ Cursor checkpoints	❌	❌	❌	❌	❌	❌	❌
Cookies from your installed browser	✅ `--from-browser`, `--cookies-file`	❌	❌	❌	❌	✅	✅	❌
Official X archive import	✅ `xactions archive`	❌	❌	❌	❌	❌	❌	❌
Language	JavaScript	Python	Python	TypeScript	TypeScript	TypeScript	Python	Python

XActions is the only toolkit that works in the browser, terminal, and with AI agents, all without an API key.

Competitor columns come from the competitive audit, which names each project and what it does better than us. Where a rival led, we built it: the approval gate and the daily caps follow x-use, the account pool follows twscrape, cursor resume follows Scweet, and browser cookie import follows bird and twitter-cli.

🆕 What's New

Area	What changed
Delete every reply you sent one account	`scripts/searchSweep.js` turns any X search into a bulk action. Open `x.com/search?q=from:you @someone&f=live`, paste it, and delete, like, repost, or reply to every result, with a floating panel, a dry run, filters that protect posts that did numbers, and multiple passes because X search returns a slice at a time. Deletes only ever touch your own posts. Docs.
Sweep a whole profile	`scripts/engageProfile.js` likes, reposts, and replies to every post on an account from the console, with a floating panel, dry run, resume, undo, and replies from your templates or from an LLM given a one-line brief (Grok works straight from the console; any provider through the extension). `xactions engage USERNAME --like --repost --comment --prompt "..."` does the same from the terminal with any provider. Docs.
A CLI you can find your way around	All 56 commands are now grouped by task instead of listed alphabetically. `xactions quickstart` gives a guided first run that adapts to what you already have set up.
Tab completion	`xactions completion bash\	zsh\	fish` prints a completion script generated from the live command tree, so every command, sub-command, and flag completes.
Log in without touching DevTools	`xactions login --from-browser` reads x.com cookies straight out of an installed Chrome, Chromium, Brave, Edge, Arc or Firefox profile. `--cookies-file` imports a Netscape `cookies.txt`, a Cookie-Editor or EditThisCookie JSON export, or a Playwright / Puppeteer `storageState`. A full cookie jar beats a bare `auth_token`, because it carries the `ct0` every write needs.
Query IDs that heal themselves	X rotates its GraphQL query IDs and every pinned client 404s at once. Ours are discovered from x.com's own bundles and cached, so a rotation is invisible. `xactions doctor` reports the cache age.
Requests signed like the real client	Every GraphQL call carries an `x-client-transaction-id` header computed the way x.com's own web client computes it, so reads get the answer the browser gets.
An account pool, and scrapes that resume	Sessions live in a SQLite database with their own proxy and a per-operation rate-limit window read from X's own headers. The pooled client rotates on a 429 and locks an account on a 401. A checkpoint written after every page means a 50,000-follower scrape that dies at page 400 restarts from its cursor, not from page one.
Daily action caps	Every MCP write is charged against a rolling 24 hour per-account budget stored on disk. The cap survives a restart, a crash, and a fresh `npx xactions-mcp`, and a call that would go over is refused before it reaches X. Defaults follow X's own published limits.
Writes a human releases	`XACTIONS_MCP_REQUIRE_APPROVAL=1` turns every write tool into a draft. Review with `xactions drafts list`, release with `xactions drafts approve` , or use the `x_list_drafts` / `x_approve_draft` / `x_discard_draft` tools.
MCP tool groups	The tool list is filterable: `--tools read,analytics` or `XACTIONS_MCP_TOOLS=read` advertises only what the session needs, and a filtered tool is neither advertised nor callable. Groups: read, write, dm, lists, spaces, analytics, ai, grok, automation, monitoring, workflows, persona, graph, data, x402, drafts, auth.
MCP over HTTP	`xactions-mcp --http` serves the Streamable HTTP transport on `/mcp` for remote and hosted clients, with optional bearer auth via `XACTIONS_MCP_TOKEN`. stdio is still the default.
One-drag install for Claude Desktop	The `.mcpb` bundle carries the server and its dependencies and prompts for the session cookie and tool groups at install time, so nothing is typed into a config file. Attached to every release.
Skills you can install	`xactions skills install --all` copies the 50 bundled skills into Claude Code, Cursor, Codex, Windsurf, or the current project. `xactions skills show` reads one without installing it.
Bring your X archive	`xactions archive summary\	export\	migrate` reads the official X data export zip: counts, date range, busiest year and top hashtags; a rewrite to JSON, CSV, Markdown and a browsable HTML viewer; or a migration to Bluesky or Mastodon. Docs.
Live event streaming	`src/streaming/livePipeline.js` reads x.com's own event pipeline: engagement counters, DM updates and typing indicators, pushed rather than polled, with subscriptions changed mid-session. It is a chunked newline-delimited JSON response, not a WebSocket, because x.com never answers that endpoint with a 101.
Signed webhooks	Outbound deliveries carry an HMAC-SHA256 signature, a timestamp, an event type and a stable delivery id, retry three times with backoff, and land in a replayable delivery log. Receivers verify with the exported `verifyWebhookSignature`.
`--compact` and `--fields`	Global on every read command. `--compact` prints one record per line as tab-separated `key=value` pairs with no colours or spinners; `--fields id,text,likes` narrows that to the columns you name. Built for agents and pipes.
`--json` everywhere	Every read command accepts `--json` and puts data on stdout and nothing else. It outranks `--output`, so a pipe is never silently turned into a file write.
Reliability	Public reads no longer need a browser at all. Profiles and timelines come from the internal GraphQL API in about a second, with no Chromium download.
Honest failures	Nothing reports empty results as success anymore. A read that cannot complete says why, and says what to do about it.

| Archive every photo and video | `xactions download @nichxbt:all

只显示了开头部分；其余内容请在仓库中阅读