X MCP Server Expands From Read-Only API Access to Ad Campaign Tools

Two servers in two months

X has spent the summer turning its API into infrastructure for AI agents, and the Model Context Protocol is how it is doing it. On June 30, 2026, the company launched a hosted MCP server. AI clients such as Claude, Cursor and Grok Build can now reach the X API with the permissions of the user's own account, and developers no longer have to build and host that bridge themselves.3 Less than two months later, X added a second, separate server for advertising. That one went live August 24 at ads-api.x.com/mcp with 23 tools, and ten of them can change live ad accounts.26

Taken together, the two launches mark a shift in X's developer strategy. The first server mostly cuts the cost of reading X's real-time data. The second lets agents take actions that cost money. The gap between those two scopes, and the confusion around how far the first server's write access goes, is the main thing to understand about X's MCP push.

What the general-purpose server actually does

X did not build one endpoint. It built two. The main server at api.x.com/mcp handles live API calls, and a companion server at docs.x.com/mcp lets coding agents search X's developer documentation.6 The docs server matters more than it might seem. Agents that can look up endpoint schemas on their own are less likely to guess at parameters, and that is a common failure mode.10

One technical detail divides the coverage. Some reports describe the setup as needing no configuration at all.2 In practice, developers still register an X developer app, set up OAuth, and run a small open-source bridge called xurl.2 One detailed setup guide says the bridge exists because X's OAuth requires each developer to bring their own app. The server does not support dynamic client registration and does not advertise native MCP OAuth discovery. So the bridge runs locally, handles the PKCE login, and caches and refreshes tokens.10 The server is hosted, but setup still takes some work.

On scope, Crypto Briefing reports that the main server exposes more than 200 API endpoints.6 Startup Fortune says it was built with FastMCP, which generates MCP tools automatically from X's OpenAPI specification. Coverage therefore follows the API rather than a hand-picked list. Developers can also restrict which operations an agent may call with an allowlist.7 Streaming and webhook endpoints are reportedly left out.7

The write-access question

This is where the reporting disagrees most, and it matters. Several outlets described the June server as able to post. One said AI apps could publish content through it.1 Another listed posting alongside likes and retweets among its core capabilities.7

TechCrunch reported the opposite, citing X directly. The company said the MCP tool does not work with X's Write API endpoints, so agents cannot use it to post autonomously, or at all.3 AIBase repeated that clarification.9 TechCrunch also said the hosted server adds no new capabilities. It only makes existing search, read, user lookup and trend analysis easier to expose to AI applications.3

A developer guide written after launch complicates things. It lists drafting and publishing X Articles, X's long-form format, among the server's tool categories.10 One way to reconcile the reports is that the server leaves out standard post creation but includes some other content operations. That reading is our inference. No source states it outright. Our view is that X's own statement to TechCrunch is the most authoritative account of launch-day behavior, and that reports of open-ended posting were overstated. Developers should check the live tool list rather than trust launch recaps.

Pricing and spam as the throttle

X is using its existing rules and prices to keep abuse in check, not anything specific to MCP. The hosted server does not get around X's API rules, which still apply when the company detects spammy behavior.3 Earlier in 2026, X updated API v2 to crack down on programmatic AI-generated replies, and it set prices at $0.015 per published post and $0.20 per post containing a link.4 Cyberpress reported that MCP access is billed purely per use, with no monthly subscription.2

AI Chat Daily raised the fair objection. Well-funded spam operators have absorbed higher costs before, and an agent that can chain searches and actions in one authenticated session is more capable than a single-purpose script. X also has not published MCP-specific rate limits.4 The Next Web summed up the trade-off well: X is betting that being a real-time data source for agents is worth more than the added spam risk.5

The ads server crosses the line the first one avoided

Whatever the June server can or cannot write, the August advertising server clearly writes. At launch, X Ads MCP had nine account and read tools, two analytics tools, two targeting-search tools and ten write tools. The write tools included activate_campaign and activate_line_item.26 Authentication uses the advertiser's own OAuth token, split across ads.read, ads.write and offline.access scopes. Without the refresh scope, tokens expire in about two hours.26

X's main safeguard is that new campaigns and line items always start paused, and nothing spends until someone activates them.24 Critics noted that the pause is weaker than it sounds. The activation tools sit under the same ads.write scope as the creation tools, so one authorized agent could create a campaign and switch it on.24 One explainer said X's public documentation does not describe a required human approval step before activation, and advised teams to add one in their own client or gateway.21 PPC Land called X's approach a middle position: it grants write access but holds back automatic activation.26

The tool count has also grown quickly. Launch coverage consistently reported 23 tools.3025 X's current documentation now lists 74, adding categories for custom audiences, creatives and media, web conversion tracking, app event tags and app lists.27 That expansion also addresses an early criticism, that the launch offered no conversion or attribution tooling.24 Conversion-tag management now appears in the docs.27

Where X sits in the MCP landscape

On the general-purpose server, X is a follower, not a pioneer. Most coverage placed it alongside GitHub, Slack, Notion, Stripe and Salesforce, which already ran official MCP endpoints.35 On advertising, one analysis noted that Meta, TikTok, Pinterest and Snap had already shipped similar connectors in 2026. By that account X was late to the pattern, but it was the first of the August pair to include write tools on day one.23 Meanwhile, the protocol has moved from Anthropic to the Agentic AI Foundation. X is now one of many platform operators running servers, alongside Google, Amazon, Meta, Microsoft and TikTok.20

X also has a reason to promote MCP that most SaaS vendors lack: it is closely tied to Grok. xAI's documentation shows Grok connecting to remote MCP servers through its API, with per-tool allowlists.11 Grok's consumer app lets users add custom MCP connectors by URL.13 xAI also hosts its own documentation MCP server.12 The Grok Build changelog is full of MCP fixes, including OAuth handling and token files that are re-read on every request so rotated credentials stay current.17 So X's servers are not one-off integrations. They make X's data and ad inventory available to Grok, while staying open to Claude, Cursor and VS Code.

The takeaway

In our reading, X's MCP strategy is less about convenience for developers than about where X sits in the AI stack. Several outlets framed it the same way: social platforms are turning from content destinations into data layers for AI systems.13 The June server shows X is willing to make its real-time feed easy for agents to read while keeping a tight grip on posting. The August server shows it is also willing to let agents act, as long as revenue is involved and there is a pause between creating and spending. Ten weeks apart, the two launches show where X draws the line. Agents get broad read access to public conversation and narrow write access to it, and their freedom to act is widest where X makes money.