Maverick X Mcp

Search, read, and work with X posts, users, timelines, and search through a local XMCP wrapper. Use when the user asks about X posts, users, timelines, or search.

Audits

Warn

ClawScanWarn

Agentic behavior and permission review.

Static analysisReview

Pattern checks against bundled files.

VirusTotalPass

Multi-engine malware detections and file reputation.

Install

openclaw skills install maverick-x-mcp

X

Quick start

Always invoke through the local HTTP wrapper. The wrapper starts this skill's local XMCP server on loopback when needed, waits for readiness, seeds mcporter's refreshable-bearer vault from the env-supplied OAuth material, and then calls mcporter.

uv run --script {baseDir}/scripts/local_http_invoke.py list maverick-x --schema

For structured output:

uv run --script {baseDir}/scripts/local_http_invoke.py call --output json maverick-x.<tool> key=value

Safety

Write operations that post, delete posts, reply, repost, like, follow, edit, or otherwise publish externally visible X content require explicit user confirmation with the exact final text or action. Search and read tools are safe to call freely while exploring. Resolve user handles and post IDs before acting on them.

Authentication

The deployment harness provides access, refresh, client-id, and client-secret env values. The wrapper seeds mcporter's vault only when the vault entry is missing or the provisioned credential material changes; it does not overwrite a refresh token rotated by mcporter during normal use.

mcporter refreshes expired X access tokens through X's OAuth2 token endpoint. If calls keep returning HTTP 401 after retry, the OAuth grant has likely been revoked or expired; reconnect the integration.

Data flow

Tool calls travel from the agent to mcporter, then to this skill's local XMCP server at http://127.0.0.1:8765/mcp. The local server forwards X API requests with the bearer token supplied on each MCP request. X sees the post, user, timeline, and search data referenced by each call. Use this skill for X-related work only; do not pass unrelated sensitive content through these tools.

Dependencies

mcporter (github.com/steipete/mcporter) — MCP CLI used to invoke the local MCP server. Auto-installed via npm install -g --ignore-scripts mcporter if missing on PATH (see install spec in frontmatter). The install spec uses unpinned mcporter (npm latest); operators with strict supply-chain controls should override the install to pin a specific version.
uv (docs.astral.sh/uv) — runs the Python wrapper and local XMCP launcher from inline script metadata.