X

This page is for operators configuring X and users connecting an account.

What you need

• X developer app
• X_CLIENT_ID
• X_CLIENT_SECRET
• Callback URL: https://your-domain.com/api/v1/accounts/x/callback
• OAuth 1.0a user authentication enabled in the X developer portal

Auth model

OpenPost currently uses X OAuth 1.0a end-to-end. Configure an app type that supports OAuth 1.0a user context and the callback URL above.

Account-specific limits

OpenPost reads the connected account's subscription_type from the authenticated X profile and applies the matching publishing limits.

Connected X account	Text limit	Video duration	Video size
Standard, unknown, or stale tier	280 weighted characters	140 seconds	512 MiB
Basic, Premium, or Premium+	25,000 weighted characters	4 hours	16 GiB

X does not count every Unicode character as one. OpenPost follows X's weighted counting rules, treats URLs as 23 characters, normalizes composed text, and keeps emoji sequences together. The counter and server validation use the same rules.

The standard profile is the safe fallback. OpenPost uses it when X omits the subscription tier, the account profile cannot be refreshed, or cached account capability data is stale. Publishing validation refreshes the tier through the connected account before applying the final text and video limits.

These account limits do not replace X API access, API limits, or post rules. Test each post type with the real account.

X documents the subscription_type user field, weighted character counting, and longer Premium video limits.

Media upload

OpenPost streams images and videos to X through the OAuth 1.0a media upload API. Videos use chunked upload, so large subscribed-account uploads are not buffered fully in application memory.

Analytics

Analytics is an optional feature per connected X account. It starts off for a new account. Enable it after connection or in Account details. OpenPost collects account followers, following, and post totals plus published-post likes, replies, reposts, quotes, bookmarks, and impressions when enabled. These reads use the same OAuth 1.0a account connection and remain subject to X API access and limits. Disabling Analytics stops future X analytics collection without deleting stored metrics or revoking authorization.

Comments and inbox

Direct messages and Comments and replies are separate optional features per connected X account. Each starts off for a new account. Enable them after connection or in Account details.

• Comments and replies: OpenPost can list replies, send replies, like or unlike replies, and delete replies posted by the connected account when enabled. Disabling it stops future X comment collection and reply actions without deleting stored replies or revoking authorization.
• Direct messages: OpenPost can collect and send direct messages when enabled. The X app and account must have Direct Messages access, and an older connection may need to be reconnected. Disabling it stops future message collection and sending without deleting stored messages or revoking authorization.

Grow is not available for X. Availability for each supported feature depends on provider support, required scopes, and plan access as distinct facts.

Local development callback

http://localhost:8080/api/v1/accounts/x/callback

Common errors

• Callback URL mismatch in the X developer portal
• Missing OAuth 1.0a user auth enablement
• Wrong redirect URI override via X_REDIRECT_URI
• X profile permissions that do not return subscription_type; OpenPost will connect the account but use standard limits