Xdevplatform/xmcp

135 tools. 58 can modify or destroy data without limits.

12 destructive tools with no built-in limits. Policy required.

Last updated:

58 can modify or destroy data
77 read-only
135 tools total

Community server · catalogue entry checked 06/04/2026

How to control Xdevplatform/xmcp ↓

What Xdevplatform/xmcp exposes to your agents

Read (77) Write / Execute (46) Destructive / Financial (12)
Critical Risk

The most dangerous Xdevplatform/xmcp tools

58 of Xdevplatform/xmcp's 135 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Xdevplatform/xmcp

PolicyLayer is an MCP gateway — it sits between your AI agents and Xdevplatform/xmcp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "deleteAccountActivitySubscription": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "addChatGroupMembers": {
    "limits": [
      {
        "counter": "addchatgroupmembers_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "chatMediaDownload": {
    "limits": [
      {
        "counter": "chatmediadownload_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Xdevplatform/xmcp — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON XDEVPLATFORM/XMCP →

Instant setup, no code required.

All 135 Xdevplatform/xmcp tools

WRITE 44 tools
Write addChatGroupMembers Add members to an existing group chat conversation. Write addListsMember Add a user as a member of a list. Write addUserPublicKey Add a public encryption key for a user chat messages. Write appendMediaUpload Append data chunks to an in-progress media upload. Write blockUsersDms Block a user from sending direct messages to the authenticated user. Write chatMediaUploadAppend Append data chunks to an in-progress chat media upload. Write chatMediaUploadFinalize Finalise a chat media upload and make it ready to attach to a message. Write chatMediaUploadInitialize Initialise a new chat media upload session. Write createAccountActivitySubscription Create an account activity subscription. Write createActivitySubscription Create an activity subscription to receive notifications. Write createChatConversation Create a new group chat conversation. Write createCommunityNotes Create a community note on a post to add context or fact-checking information. Write createDirectMessagesByConversationId Send a direct message in an existing DM conversation. Write createDirectMessagesByParticipantId Send a direct message to a specific user, creating a conversation if needed. Write createDirectMessagesConversation Create a new direct message conversation with one or more participants. Write createLists Create a new public or private list. Write createMediaMetadata Add metadata such as alt text to uploaded media. Write createMediaSubtitles Add subtitle tracks to uploaded video media. Write createPosts Create and publish a new post (tweet), including replies, quotes, and polls. Write createUsersBookmark Add a post to the authenticated user bookmarks. Write evaluateCommunityNotes Submit a rating or evaluation of an existing community note. Write finalizeMediaUpload Finalise a media upload and make it ready to attach to a post. Write followList Follow a list to see its posts in the authenticated user timeline. Write followUser Follow a user on behalf of the authenticated user. Write hidePostsReply Hide or unhide a reply to a post owned by the authenticated user. Write initializeChatConversationKeys Initialise encryption keys for a chat conversation. Write initializeChatGroup Initialise a new encrypted group chat. Write initializeMediaUpload Initialise a new media upload session for images, video, or GIFs. Write likePost Like a post on behalf of the authenticated user. Write markChatConversationRead Mark a chat conversation as read. Write mediaUpload Upload media in a single request for small files. Write muteUser Mute a user to hide their posts from the authenticated user timeline. Write pinList Pin a list for quick access in the authenticated user profile. Write repostPost Repost a post on behalf of the authenticated user, sharing it with followers. Write sendChatMessage Send a message in a chat conversation. Write unblockUsersDms Unblock a user from sending direct messages. Write unfollowList Unfollow a list to stop seeing its posts in the timeline. Write unfollowUser Unfollow a user on behalf of the authenticated user. Write unlikePost Remove a like from a previously liked post. Write unmuteUser Unmute a user to restore their posts in the timeline. Write unpinList Unpin a list from the authenticated user profile. Write unrepostPost Remove a repost of a previously reposted post. Write updateActivitySubscription Update an activity subscription configuration. Write updateLists Update a list name, description, or privacy setting.
READ 77 tools
Read chatMediaDownload Download media from a chat conversation. Read dmConversationsMediaDownload Download media attached to a direct message. Read getAccountActivitySubscriptionCount Retrieve the current account activity subscription count. Read getAccountActivitySubscriptions List all account activity subscriptions. Read getActivitySubscriptions List all activity subscriptions. Read getChatConversation Retrieve details of a specific chat conversation. Read getChatConversations List all chat conversations for the authenticated user. Read getCommunitiesById Retrieve details of a specific community by its ID. Read getComplianceJobs List all compliance jobs and their statuses. Read getComplianceJobsById Retrieve the status and details of a specific compliance job. Read getConnectionHistory Retrieve the history of connection events and status changes. Read getDirectMessagesEvents List direct message events across all conversations. Read getDirectMessagesEventsByConversationId List direct message events in a specific conversation. Read getDirectMessagesEventsById Retrieve a specific direct message event by its ID. Read getDirectMessagesEventsByParticipantId List direct message events with a specific participant. Read getInsights28Hr Retrieve engagement insights for posts from the last 28 hours. Read getInsightsHistorical Retrieve historical engagement insights for posts. Read getListsById Retrieve details of a specific list by its ID. Read getListsFollowers Retrieve users who follow a specific list. Read getListsMembers Retrieve the members of a specific list. Read getListsPosts Retrieve recent posts from members of a specific list. Read getMediaAnalytics Retrieve engagement analytics for uploaded media. Read getMediaByMediaKey Retrieve details of a specific media item by its key. Read getMediaByMediaKeys Retrieve details of multiple media items by their keys. Read getMediaUploadStatus Check the processing status of a media upload. Read getNews Retrieve a specific news article or story by its ID. Read getOpenApiSpec Retrieve the X API OpenAPI specification document. Read getPostsAnalytics Retrieve detailed analytics and metrics for posts. Read getPostsById Retrieve a specific post by its ID, including metadata and engagement counts. Read getPostsByIds Retrieve multiple posts by their IDs in a single request. Read getPostsCountsAll Retrieve the total count of posts matching a search query across all time. Read getPostsCountsRecent Retrieve the count of recent posts matching a search query. Read getPostsLikingUsers Retrieve users who liked a specific post. Read getPostsQuotedPosts Retrieve posts that quote a specific post. Read getPostsRepostedBy Retrieve users who reposted a specific post. Read getPostsReposts Retrieve reposts of a specific post. Read getSpacesBuyers Retrieve users who purchased tickets to a Space. Read getSpacesByCreatorIds Retrieve Spaces created by specific users. Read getSpacesById Retrieve details of a specific Space by its ID. Read getSpacesByIds Retrieve details of multiple Spaces by their IDs. Read getSpacesPosts Retrieve posts shared within a specific Space. Read getTrendsByWoeid Retrieve trending topics for a specific location by WOEID. Read getTrendsPersonalizedTrends Retrieve personalised trending topics for the authenticated user. Read getUsage Retrieve API usage statistics and rate limit information for the authenticated app. Read getUsersAffiliates Retrieve affiliate accounts associated with a specific user. Read getUsersBlocking Retrieve users blocked by the authenticated user. Read getUsersBookmarkFolders Retrieve the authenticated user bookmark folders. Read getUsersBookmarks Retrieve all bookmarked posts for the authenticated user. Read getUsersBookmarksByFolderId Retrieve bookmarked posts in a specific folder. Read getUsersById Retrieve a user profile information by their ID. Read getUsersByIds Retrieve multiple users profile information by their IDs. Read getUsersByUsername Retrieve a user profile information by their username. Read getUsersByUsernames Retrieve multiple users profile information by their usernames. Read getUsersFollowedLists Retrieve lists followed by a specific user. Read getUsersFollowers Retrieve a user followers. Read getUsersFollowing Retrieve users that a specific user is following. Read getUsersLikedPosts Retrieve posts liked by a specific user. Read getUsersListMemberships Retrieve lists that a specific user is a member of. Read getUsersMe Retrieve the authenticated user own profile information. Read getUsersMentions Retrieve posts that mention a specific user. Read getUsersMuting Retrieve users muted by the authenticated user. Read getUsersOwnedLists Retrieve lists owned by a specific user. Read getUsersPinnedLists Retrieve lists pinned by a specific user. Read getUsersPosts Retrieve posts created by a specific user. Read getUsersPublicKey Retrieve a user public encryption key for direct messages. Read getUsersPublicKeys Retrieve public encryption keys for multiple users. Read getUsersRepostsOfMe Retrieve reposts of the authenticated user posts. Read getUsersTimeline Retrieve the authenticated user home timeline with recent posts. Read searchCommunities Search for communities by keyword or topic. Read searchCommunityNotesWritten Search for community notes written by the authenticated user. Read searchEligiblePosts Search for posts eligible to receive community notes. Read searchNews Search for news articles and stories by keyword or topic. Read searchPostsAll Search for posts across all of X history using advanced query operators. Read searchPostsRecent Search for recent posts from the last 7 days using query operators. Read searchSpaces Search for Spaces by title or keyword. Read searchUsers Search for users by name, username, or keyword. Read validateAccountActivitySubscription Validate an account activity subscription.

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Xdevplatform/xmcp

Can an AI agent delete data through the Xdevplatform/x MCP server? +

Yes. The Xdevplatform/xmcp server exposes 12 destructive tools including deleteAccountActivitySubscription, deleteActivitySubscription, deleteAllConnections. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Xdevplatform/xmcp? +

The Xdevplatform/xmcp server has 44 write tools including addChatGroupMembers, addListsMember, addUserPublicKey. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Xdevplatform/xmcp.

How many tools does the Xdevplatform/x MCP server expose? +

135 tools across 6 categories: Destructive, Execute, Financial, Other, Read, Write. 77 are read-only. 58 can modify, create, or delete data.

How do I enforce a policy on Xdevplatform/xmcp? +

Register the Xdevplatform/x MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Xdevplatform/xmcp tool call.

Deterministic rules across all 135 Xdevplatform/xmcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

135 Xdevplatform/xmcp tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Xdevplatform/x's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.