Is it safe to connect an MCP server to X?

An MCP connection is as safe as the server you picked and the keys you handed it. You're handing it a way to act as you. Read who runs it and which tools it exposes. An Evenpost key can draft, and on a local connection attach files. It can't approve or post. You approve each post in the app.

Is it safe to connect an MCP server to your X account?

It depends on the server, not on MCP as a protocol.

A server is a list of tools plus a way to authenticate. Before you connect one, read who runs it, which tools it exposes, and what a leaked key can do. Prefer a key you can revoke without handing anyone your X password or cookies. If a server asks you to paste an X password or cookie, treat that as unsafe and stop.

Secure the X account before you connect any posting tool. Follow current X Help for two-factor authentication and connected apps, and know that no posting tool, Evenpost included, can get a lost account back.

Other vendors are not reviewed here, and this guide does not pick which MCP servers can post to X. Official X MCP facts live on Can X's official server for AI agents post tweets?.

What are you actually handing the server?

You are handing it whatever credentials and tools that connection exposes, which may let it act in your name.

The agent signs in with a key from Settings, not with an X password or cookie. Connect in about 2 minutes, fetched 9 November 2026, describes creating a key in Settings and connecting Claude Code, Claude Desktop, Cursor, OpenAI Codex, or Grok CLI. What your agent can do, fetched the same day, says the agent can draft, edit, attach local files, length-check, and read. It also says: "There is no post tool and no approve tool." add_photo takes a "Path to the image file on this machine."

Hosted connections are documented separately on Connect a hosted agent. That page says a hosted agent "can draft" and "cannot approve or post." Hosted internals beyond that live page are not documented here.

A leaked key that can only draft is still a problem, because it can fill your drafts with text you did not ask for. Read that draft before you approve it.

Is it safe if the server wants your X password or cookies?

No. Do not paste an X password or cookies into an MCP server.

That is the sharp version of this question. A password or cookie is a login to X itself. An Evenpost key is a key for drafting in the app. Those are not the same thing. If a server wants the first kind, do not connect it.

Can a prompt trick the agent into sending a post?

Yes, if the agent holds a post tool. If it has no post tool, the planted instruction can only become a draft you can reject.

Prompt injection is text hidden in something the agent was only meant to read, such as a page, a file, or a comment. The deep dive is Can prompt injection make your AI agent post to X?. The short version for this page: a rule in a prompt is more text, and planted text can argue with it. Removing the ability to publish is what stops a live post.

You stay responsible for what goes out. See Who is responsible for AI agent posts? and Can an AI agent post to X?.

How do you disconnect an agent key?

Revoke the key in Evenpost Settings.

That wording is on two live pages fetched 9 November 2026: Can prompt injection make your AI agent post to X? ("you can revoke it in Settings") and How to schedule X posts from the terminal (the same line). What your agent can do says making or revoking keys is an owner-only action in the app. Do not call an /oauth/revoke URL to do this. On X, review connected apps in X Settings and revoke the X-side access if it is still listed.

Evenpost is an app for X (Twitter) for solo founders. You and your agent draft, you approve each post in the app, and it posts with natural spacing, or right away if you choose Post now. Updates: @evenpost.

Read the server's tool list and the prompt-injection answer before you connect anything. If you want to disconnect later, revoke the key in Evenpost Settings.

FAQ

Is connecting an MCP server to X safe?

It depends on the server and the keys you handed it. Secure the X account first, following current X Help, and know that Evenpost cannot get a lost account back. Read who runs the server and which tools it exposes. Do not paste an X password or cookies into the server.

Should I paste my X password or cookies into an MCP server?

No. A password or cookie is a login to X. Do not give that to an MCP server.

Can prompt injection make an agent post something I didn't write?

Yes, if the agent has a post tool. If it has no post tool, the planted text can only leave a draft for you to reject. See the live prompt-injection answer.

Does Evenpost post without my approval?

No. The documented tools can draft, and on a local connection attach files. They cannot approve or post. You approve each post in the app.

How do I revoke an Evenpost agent key?

Revoke it in Evenpost Settings, not at an /oauth/revoke URL. Live pages use that wording, and the tool list says making or revoking keys is something only you can do in the app. On X, review connected apps in X Settings and revoke the X-side access if it is still listed.