TTwitter Cookie mcpServerTwitter MCP Server Enhanced fork of gkydev/twitter-mcp-server with configuration-based authentication. Enable AI assistants to interact with Twitter using cookie-based authentication managed via config files instead of prompt-embedded tokens. Supports comprehensive Twitter operations including posting tweets, managing interactions (likes, retweets, replies), accessing timelines, sending direct messages, searching content, and retrieving trending topics. Perfect for social media automation, content analysis, and Twitter workflow integration with enhanced security practices.

mcp-so:cookie-twitter-mcp_dewkiks

View source
A
100/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

1

Score

100/100

LOW 1

Findings (1)

LOW
Hardcoded secrets in MCP env block
L65

Detects hardcoded API keys, tokens, or passwords in MCP server environment configuration

"env": { + "TWITTER_AUTH_TOKEN": "your_auth_token_here"
FIX

Remove shell metacharacters (semicolons, pipes, ampersands, backticks) from MCP server arguments. Use explicit argument arrays and avoid shell expansion in MCP configurations.

FP?

Likely FP if the metacharacter is a literal part of a non-shell argument (e.g., a regex pattern or a URL query parameter containing ampersands).