xitter

name	xitter
description	Interact with X/Twitter via the x-cli terminal client using official X API credentials. Use for posting, reading timelines, searching tweets, liking, retweeting, bookmarks, mentions, and user lookups.
version	1.0.0
author	Siddharth Balyan + Hermes Agent
license	MIT
platforms	["linux","macos"]
prerequisites	{"commands":["uv"],"env_vars":["X_API_KEY","X_API_SECRET","X_BEARER_TOKEN","X_ACCESS_TOKEN","X_ACCESS_TOKEN_SECRET"]}
metadata	{"hermes":{"tags":["twitter","x","social-media","x-cli"],"homepage":"https://github.com/Infatoshi/x-cli"}}

Xitter — X/Twitter via x-cli

Use x-cli for official X/Twitter API interactions from the terminal.

This skill is for:

• posting tweets, replies, and quote tweets
• searching tweets and reading timelines
• looking up users, followers, and following
• liking and retweeting
• checking mentions and bookmarks

This skill intentionally does not vendor a separate CLI implementation into Hermes. Install and use upstream x-cli instead.

Important Cost / Access Note

X API access is not meaningfully free for most real usage. Expect to need paid or prepaid X developer access. If commands fail with permissions or quota errors, check your X developer plan first.

Install

Install upstream x-cli with uv:

uv tool install git+https://github.com/Infatoshi/x-cli.git

Upgrade later with:

uv tool upgrade x-cli

Verify:

x-cli --help

Credentials

You need these five values from the X Developer Portal:

• X_API_KEY
• X_API_SECRET
• X_BEARER_TOKEN
• X_ACCESS_TOKEN
• X_ACCESS_TOKEN_SECRET

Get them from:

• https://developer.x.com/en/portal/dashboard

Why does X need 5 secrets?

Unfortunately, the official X API splits auth across both app-level and user-level credentials:

• X_API_KEY + X_API_SECRET identify your app
• X_BEARER_TOKEN is used for app-level read access
• X_ACCESS_TOKEN + X_ACCESS_TOKEN_SECRET let the CLI act as your user account for writes and authenticated actions

So yes — it is a lot of secrets for one integration, but this is the stable official API path and is still preferable to cookie/session scraping.

Setup requirements in the portal:

1. Create or open your app
2. In user authentication settings, set permissions to Read and write