Atlas / MCP servers / crazyrabbitltc / Twitter

TwitterBLOCK

Name: Twitter
Author: crazyrabbitltc

mcp/crazyrabbitltc/twitter

MCP server by crazyrabbitltc · Audited 2026-10-09

⚑ Report / re-scan Source ↗

Model Context Protocol Server for Accessing twitter

Verdict

BLOCK

Grade

Trust score

44 /100

Exposed tools

16 16r · 0w · 0d

Transport

sse · stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A comprehensive Model Context Protocol server implementation for X (Twitter) API integration with professional workflow automation, enhanced error handling, and real-time documentation.

🚀 Features

53 Total Tools - 33 Twitter API + 20 enhanced SocialData.tools research capabilities
Advanced Analytics - Thread analysis, network mapping, sentiment analysis, viral tracking
Bypasses API Restrictions - Enhanced research tools work without Pro tier requirements
Professional Error Handling - Clear upgrade guidance and graceful API key handling
5 Workflow Prompts - Pre-built automation templates
6 Dynamic Resources - Real-time API documentation and status
Full MCP Compliance - Tools, prompts, and resources support

📋 Quick Start

Prerequisites

Node.js 18+
npm or yarn
X (Twitter) API credentials (Basic tier minimum - $200/month)

Local Installation

Clone and Install

git clone 
cd twitter-server
npm install

Environment Setup

cp .env.example .env
# Edit .env with your credentials

Required Environment Variables:

# Twitter API credentials (Required)
X_API_KEY=your_api_key_here
X_API_SECRET=your_api_secret_here  
X_ACCESS_TOKEN=your_access_token_here
X_ACCESS_TOKEN_SECRET=your_access_token_secret_here

# SocialData.tools API key (Optional - enables enhanced research tools)
SOCIALDATA_API_KEY=your_socialdata_api_key_here
SOCIALDATA_BASE_URL=https://api.socialdata.tools  # Optional, uses default if not set

Build and Run

npm run build
npm start

Test the Server

# Test with JSON-RPC calls
source .env && echo '{"jsonrpc": "2.0", "id": 1, "method": "tools/list"}' | node dist/index.js

#

Read from source at commit aa0fbb58c8c7OBSERVED · 2026-10-09

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add mcp-twitter-server --env BEARER_TOKEN=${BEARER_TOKEN} --env CONSUMER_SECRET=${CONSUMER_SECRET} --env CONSUMER_TOKEN=${CONSUMER_TOKEN} --env DOTENV_CONFIG_DOTENV_KEY=${DOTENV_CONFIG_DOTENV_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "mcp-twitter-server": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "BEARER_TOKEN": "${BEARER_TOKEN}",
        "CONSUMER_SECRET": "${CONSUMER_SECRET}",
        "CONSUMER_TOKEN": "${CONSUMER_TOKEN}",
        "DOTENV_CONFIG_DOTENV_KEY": "${DOTENV_CONFIG_DOTENV_KEY}"
      }
    }
  }
}

Exposed tools (16)

16 read · 0 write · 0 destructive.

Tool	Risk	Description
`analytics-report`	read	Generate comprehensive Twitter analytics and engagement reports
`audience`	read	Target audience for the tweet
`business_type`	read	Type of business or personal brand
`campaign_type`	read	Type of campaign or content
`community-management`	read	Best practices for managing Twitter community interactions and responses
`compose-tweet`	read	Guide for composing effective tweets with hashtags, mentions, and engagement strategies
`content-strategy`	read	Develop a Twitter content strategy with scheduling and engagement recommendations
`goals`	read	Primary goals (growth, engagement, sales, awareness)
`hashtag-research`	read	Research and recommend relevant hashtags for better tweet discoverability
`industry`	read	Industry or niche for hashtag research
`period`	read	Time period for analysis (recent, week, month)
`scenario`	read	Type of interaction (customer service, crisis management, general engagement)
`tone`	read	The desired tone (professional, casual, humorous, informative)
`topic`	read	The main topic or subject of the tweet
`twitter-help`	read	Get help with Twitter MCP server tools and usage
`username`	read	Twitter username to analyze

Trust audit

BLOCKgrade F · trust 44/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (5 observation(s))
Shell: declared (8 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

node_modules/depd/index.js:425

var deprecatedfn = new Function('fn', 'log', 'deprecate', 'message', 'site',

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

node_modules/depd/index.js:427

'return function (' + args + ') {' +

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

node_modules/typescript/lib/lib.es5.d.ts:998

exec(string: string): RegExpExecArray | null;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHSupply chain · supply.typosquat · CWE-829, CWE-1357

node_modules/iconv-lite/package.json

request ~ requests

Why it matters. dependency name one edit from a popular package

Fix. verify the package; likely typosquat

MEDIUMInventory / provenance · inv.symlink · CWE-1104

node_modules/.bin/tsc

node_modules/.bin/tsc

Why it matters. link not followed

MEDIUMInventory / provenance · inv.symlink · CWE-1104

node_modules/.bin/tsserver

node_modules/.bin/tsserver

Why it matters. link not followed

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

node_modules/@types/node/url.d.ts:543

* console.log(myURL.password);

MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94

node_modules/iconv-lite/encodings/sbcs-data-generated.js:100

"chars": "€پ‚ƒ„...†‡ˆ‰ٹ‹Œچژڈگ‘’“”•–—کTMڑ›œں ،¢£¤¥¦§ ̈©ھ«¬® ̄°±23 ́μ¶· ̧1؛»1⁄41⁄23⁄4؟ہءآأؤإئابةتثجحخدذرزسشصض×طظعغـفقكàلâمنهوçèéêëىيîïًٌٍَôُِ÷ّùْûüے"

MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94

node_modules/iconv-lite/encodings/sbcs-data-generated.js:373

"chars": "«»...“”�•‘’� กขฃคฅฆงจฉชซฌญฎฏฐฑฒณดตถทธนบปผฝพฟภมยรฤลฦวศษสหฬอฮฯะัาําิีึืฺุู–—฿เแโใไๅๆ็่้๊๋์ํTM๏๐๑๒๓๔๕๖๗๘๙®©����"

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

node_modules/dotenv/README-es.md:112

PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

node_modules/dotenv/README-es.md:122

PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----\nKh9NV...\n-----END RSA PRIVATE KEY-----\n"

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

node_modules/dotenv/README.md:112

PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

node_modules/dotenv/README.md:122

PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----\nKh9NV...\n-----END RSA PRIVATE KEY-----\n"

LOWInventory / provenance · inv.hidden_file · CWE-1104

.roomodes

.roomodes

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.taskmasterconfig

.taskmasterconfig

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.windsurfrules

.windsurfrules

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

node_modules/.package-lock.json

.package-lock.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose