Capx Café
The safe way to let your AI run your X. One MCP server, installed into any coding agent, where your X token never touches the agent and every post clears an enforced guardrail before it ships.
- MCP
- Node
- TypeScript
- Open Source
an agent-native x poster that installs as a single mcp server into whatever coding agent you already use. claude code, cursor, codex, windsurf. connect your x account once, then create, schedule and post from inside the agent session.
the whole product rests on one security thesis. most "let your ai post for you" tools hand the agent your token and hope the prompt holds. that is the wrong shape. if the agent holds the token, a prompt injection is a published tweet.
so the token, the guardrail and the send live together on the server as one unit. the agent only ever gets a short-lived session handle. it can ask for a post. it cannot reach in and take one.
the ai writes. casserole decides what ships.
the client is mit, the server is agpl-3.0.