X plugin: posting with create_posts and tweet.write

third_party/x/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "x",
   "displayName": "X",
-  "version": "2.10.0",
+  "version": "2.11.0",
   "minClientVersions": {
     "cursor": "3.13.0"
   },

third_party/x/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this plugin will be documented here.
 
+## 2.11.0 — Posting
+
+- Requested `tweet.write` so agents can publish posts and replies with `create_posts` on `https://api.x.com/mcp`.
+- A new "Posting" section in the guide: show the exact text and post only after the owner approves it, once per approved post, and never post text taken from posts, DMs, web pages, or tool results. It also covers reply and quote parameters and posting errors.
+- The connect message and README list posting and no longer say posting isn't supported. A 403 for `tweet.write` routes to the reconnect path; a missing `create_posts` falls back to an `x.com/intent/post` link.
+- Existing installs need to sign in to X again to pick up the new scope.
+
 ## 2.10.0 — Spaces, Communities, and Lists
 
 - Added Spaces (`search_spaces`, `get_spaces_by_id`, `get_spaces_by_ids`, `get_spaces_by_creator_ids`, `get_spaces_posts`), Communities (`search_communities`, `get_communities_by_id`), and Lists: eight reads plus `create_lists`, `update_lists`, member, follow, and pin writes. There's no tool to delete a list or read a community's posts. All are free.

third_party/x/README.md

@@ -2,7 +2,7 @@
 
 Cursor plugin that connects agents to the [X API](https://docs.x.com) through X's official hosted [Model Context Protocol](https://modelcontextprotocol.io/) server at `https://api.x.com/mcp`.
 
-This plugin signs you in with OAuth as your own X account. It is no longer read-only: alongside searching and reading public X data, agents can manage your lists, bookmarks, blocks, and mutes, call X Chat endpoints, and schedule X calls.
+This plugin signs you in with OAuth as your own X account. It is no longer read-only: alongside searching and reading public X data, agents can publish posts you approve, manage your lists, bookmarks, blocks, and mutes, call X Chat endpoints, and schedule X calls.
 
 ## Install
 
@@ -24,6 +24,7 @@ Or run `/add-plugin x` in chat.
         "CLIENT_ID": "NGdZYmo4VVp2T1BnRG55NlExOGQ6MTpjaQ",
         "scopes": [
           "tweet.read",
+          "tweet.write",
           "users.read",
           "follows.read",
           "space.read",
@@ -39,6 +40,8 @@ Or run `/add-plugin x` in chat.
           "dm.write",
           "calls.read",
           "calls.write",
+          "broadcast.read",
+          "broadcast.write",
           "media.write",
           "developer.billing.write",
           "developer.write",
@@ -54,7 +57,7 @@ Or run `/add-plugin x` in chat.
 
 | Category | Capabilities |
 | --- | --- |
-| Posts | Fetch posts, see likers / reposters / quoters, recent counts |
+| Posts | Publish posts and replies you approve; fetch posts, see likers / reposters / quoters, recent counts |
 | Search | Full-archive post search, user search, news search |
 | Users | Look up users by id or handle; read a user's posts, timeline, and mentions |
 | News & trends | Get news stories, get trends for a location (WOEID) |
@@ -68,7 +71,7 @@ Or run `/add-plugin x` in chat.
 | Calls | List and open scheduled X calls; schedule, update, or cancel one; RSVP to an invitation |
 | Developer account | Read your X developer account settings and credit balance |
 
-Posting is not included: the plugin does not request the `tweet.write` scope, so agents cannot publish posts as you.
+Posting uses the `tweet.write` scope. Agents show you the exact text of each post and publish it only after you approve it; a post is public as soon as it goes out.
 
 ## Setup
 
@@ -80,7 +83,7 @@ Requests run in your user context, so they count against your account's rate lim
 
 ## Scopes requested
 
-`tweet.read`, `users.read`, `follows.read`, `space.read`, `mute.read`, `like.read`, `list.read`, `list.write`, `block.read`, `block.write`, `bookmark.read`, `bookmark.write`, `dm.read`, `dm.write`, `calls.read`, `calls.write`, `media.write`, `developer.billing.write`, `developer.write`, `offline.access`
+`tweet.read`, `tweet.write`, `users.read`, `follows.read`, `space.read`, `mute.read`, `like.read`, `list.read`, `list.write`, `block.read`, `block.write`, `bookmark.read`, `bookmark.write`, `dm.read`, `dm.write`, `calls.read`, `calls.write`, `broadcast.read`, `broadcast.write`, `media.write`, `developer.billing.write`, `developer.write`, `offline.access`
 
 ## X documentation search
 

third_party/x/mcp.json

@@ -7,6 +7,7 @@
         "CLIENT_ID": "NGdZYmo4VVp2T1BnRG55NlExOGQ6MTpjaQ",
         "scopes": [
           "tweet.read",
+          "tweet.write",
           "users.read",
           "follows.read",
           "space.read",