clix

mcp
Guvenlik Denetimi
Uyari
Health Gecti
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 182 GitHub stars
Code Uyari
  • fs module — File system access in .github/workflows/endpoint-health.yml
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool is an MCP server and CLI that lets you interact with X (formerly Twitter) directly from your terminal or via an AI agent. It bypasses the official API by extracting and using cookie-based authentication directly from your web browser.

Security Assessment
Risk Rating: High. This tool requires you to run a command that extracts active session cookies from your web browser. Because it relies on these cookies to function, it inherently accesses highly sensitive authentication data. The tool makes outbound network requests to X's internal endpoints to read your timeline, post tweets, and perform other account actions. The automated scan found no hardcoded secrets and no explicitly dangerous administrative permissions requested by the package itself. However, a minor warning was flagged for file system access within an automated GitHub workflow file, which is standard for development pipelines but worth noting.

Quality Assessment
The project demonstrates strong community interest and active development. It is licensed under the standard MIT license, which is excellent for open-source transparency and legal clarity. The repository is highly active, with its latest code push occurring just today. Additionally, it has accumulated 182 GitHub stars, indicating a solid base of early adopters and community trust in its functionality.

Verdict
Use with caution — while the tool is actively maintained and well-documented, granting any third-party script or AI agent access to your active browser cookies carries a significant risk of account compromise.
SUMMARY

X from terminal. No API keys needed. Just plug your AI Agent.

README.md

clix

X from terminal. Built for humans and AI agents. No API keys.

Python 3.11+ MIT PyPI


Why?

Twitter killed free API access. clix uses cookie-based auth — just log in with your browser, and you're in. Zero API keys, zero OAuth dance.

Three interfaces, one tool: rich terminal output for humans, --json/--yaml/--compact for scripts, and a built-in MCP server for AI agents.

Quick Start

# install
uv pip install clix0

# authenticate (extracts cookies from your browser)
clix auth login

Commands

Content

Command Description
clix feed [--type for-you|following] [--count N] Timeline
clix search <query> [--type top|latest|photos|videos] Search tweets
clix trending Trending topics
clix tweet <id> [--export FILE] View tweet + thread (export articles as Markdown)
clix tweets <id1> <id2> ... Batch fetch tweets
clix user <handle> Profile + recent tweets
clix users <handle1> <handle2> ... Batch fetch users
clix bookmarks List bookmarks
clix bookmarks-folders List bookmark folders
clix bookmarks-folder <id> View tweets in a bookmark folder

Actions

Command Description
clix post <text> [--reply-to ID|URL] [--image FILE] Post a tweet (up to 4 images)
clix delete <id> Delete a tweet
clix like <id> / clix unlike <id> Like / unlike
clix retweet <id> / clix unretweet <id> Retweet / undo
clix bookmark <id> / clix unbookmark <id> Bookmark / remove
clix follow <handle> / clix unfollow <handle> Follow / unfollow
clix block <handle> / clix unblock <handle> Block / unblock
clix mute <handle> / clix unmute <handle> Mute / unmute
clix download <tweet-id> [--output-dir DIR] Download media

Scheduled Tweets

Command Description
clix schedule <text> --at <time> Schedule a tweet
clix scheduled List scheduled tweets
clix unschedule <id> Cancel scheduled tweet

Lists

Command Description
clix lists View your lists
clix lists view <id> Tweets from a list
clix lists create <name> [--private] Create a list
clix lists delete <id> Delete a list
clix lists members <id> View members
clix lists add-member <id> <handle> Add member
clix lists remove-member <id> <handle> Remove member
clix lists pin <id> / clix lists unpin <id> Pin / unpin list

Jobs

Command Description
clix jobs search <query> [--location LOC] [--location-type remote|onsite|hybrid] Search job listings on X
clix jobs view <id> View job details

Direct Messages

Command Description
clix dm inbox View conversations
clix dm send <handle> <text> Send a DM

System

Command Description
clix auth status|login|set|accounts|switch|import Authentication
clix config Manage config
clix doctor Run diagnostics

Output Modes

Every command supports --json for structured output. Pipe detection is automatic — non-TTY gets JSON by default.

# structured JSON
clix feed --json | jq '.tweets[0].text'

# token-optimized for AI agents
clix feed --compact

# YAML
clix feed --yaml

# full text (no truncation)
clix feed --full-text

MCP Server

clix ships as an MCP server — any MCP-compatible client can use it.

{
  "mcpServers": {
    "clix": {
      "command": "uvx",
      "args": ["clix0", "mcp"]
    }
  }
}

Or with explicit auth:

{
  "mcpServers": {
    "clix": {
      "command": "uvx",
      "args": ["clix0", "mcp"],
      "env": {
        "X_AUTH_TOKEN": "your-token",
        "X_CT0": "your-ct0"
      }
    }
  }
}

46 tools covering all commands: feed, search, trending, tweets, users, bookmarks, lists, DMs, jobs, post, delete, like, unlike, retweet, unretweet, bookmark, unbookmark, follow, unfollow, block, unblock, mute, unmute, schedule, download, and more.

Proxy Support

# via environment variable
CLIX_PROXY=socks5://127.0.0.1:1080 clix feed

# via config
clix config set network.proxy socks5://127.0.0.1:1080

Contributing

See CONTRIBUTING.md.

Disclaimer

This tool is for educational and personal use only. It is not affiliated with, endorsed by, or associated with X Corp (formerly Twitter). Use at your own risk. The authors are not responsible for any consequences resulting from the use of this software. By using this tool, you agree to comply with X/Twitter's Terms of Service.

License

MIT

Yorumlar (0)

Sonuc bulunamadi