# x-api CLI Full Reference

Use `x-api --help` and `x-api <command> --help` as the source of truth for flags.

Current binary and build target:

```bash
cargo build -p x-api-cli --all-features --bin x-api
./target/debug/x-api --help
./target/debug/x-api output-schema
```

Authentication is supplied through cookies flags, stdin, environment/profile files, or the command-specific options accepted by the clap parser.

Important command coverage:

- `dm send --api-version v2 --user-id <id> --text <text>`
- `dm send-batch --api-version v2 --user-ids <ids...> --text <text>`
- `upload image --file <path> --category tweet-image`
- `upload multiple --file <path> --category dm-image --count <n>`
- `inbox updates`
- `inbox conversations --max-count <n>`
- `inbox count`
- `communities search --query <text>`
- `communities join --community-id <id>`
- `search top|latest|people|media|lists --query <text>`
- `posts get-tweets --user-id <id>`
- `posts get-likes --user-id <id>`
- `posts retweet --id <tweet_id>` — pure Repost (CreateRetweet); check `data.success` / `data.retweet_id`. No promoted engagement_request fields.
- `posts unretweet --id <original_tweet_id>` — DeleteRetweet; original tweet id only. Success needs unretweet result path; GraphQL errors => `data.success=false`.
- `user about`
- `user public --screen-name <name>`
- `user followers --user-id <id>`
- `user following --user-id <id>`
- `user follow --user-id <id>`
- `user unfollow --user-id <id>`
- `auth token-to-cookies --token <auth_token> [--proxy <url>] --allow-plaintext-secrets` — exchange a single auth_token for full cookies; runs without `--cookies-file` (no existing cookies needed). Output envelope `data` carries `cookies`/`ct0`/`user_id`/`auth_token`. Without `--allow-plaintext-secrets` it refuses (the command emits plaintext secrets).

The legacy CLI binary name is not a supported current entry.