skillmake
← marketplace
engineersapisha:992b9ddd930c96cdmanual

xurl

Use when working with xurl X API CLI: install, auth, app choice, shortcuts, raw endpoints from steipete/agent-scripts.

Install confidence
curl --create-dirs -fsSL https://skillmake.xyz/i/xurl -o ~/.claude/skills/xurl/SKILL.md
Pinned content
sha:992b9ddd930c96cd
Generated with
manual
Source
github.com

The file served at /api/marketplace/xurl-992b9ddd/raw matches this hash. Inspect before install, then copy the command.

3,206 chars · ~802 tokens
---
name: xurl
description: "Use when working with xurl X API CLI: install, auth, app choice, shortcuts, raw endpoints from steipete/agent-scripts."
source: https://github.com/steipete/agent-scripts/tree/main/skills/xurl
generated: 2026-05-27T20:56:58.132Z
category: api
audience: engineers
---

## When to use

- Using the xurl skill's upstream workflow, guardrails, and local-tool assumptions.
- Auditing commands or operational steps before changing xurl behavior.
- Needing a compact agent reference for xurl X API CLI: install, auth, app choice, shortcuts, raw endpoints.

## Key concepts

### Install

Homebrew: npm: Shell script: Go:.

### Safety

Never read, print, summarize, upload, or paste ~/.xurl into LLM context. Never ask the user to paste client secrets, bearer tokens, or OAuth tokens into chat. Never use --verbose in agent runs; it can expose auth headers. Do not run auth commands with inline secret flags in an agent session. The user must register app credentials manually on their machine outside the agent session.

### Auth

Check current state: If an app is already registered, complete OAuth 2.0: Multi-app: Notes: xurl stores app config and tokens in ~/.xurl. OAuth 2.0 redirect URI in the X developer portal should be http://localhost:8080/callback. App registration examples with inline secrets are intentionally omitted here. Do that outside the agent session.

### Common shortcuts

POSTID can also be a full X status URL.

### Raw endpoint mode

GET: POST JSON: Headers: Choose auth type: Choose OAuth2 account: Streaming:.

### Quick checks

Install: Auth: Live request after auth:.

## API reference

```
npx skills add steipete/agent-scripts --skill xurl
```

Install the xurl skill from steipete/agent-scripts.

```
npx skills add steipete/agent-scripts --skill xurl
```

```
brew install --cask xdevplatform/tap/xurl.
```

Command or snippet documented by the upstream xurl skill.

```
brew install --cask xdevplatform/tap/xurl
```

```
npm install -g @xdevplatform/xurl.
```

Command or snippet documented by the upstream xurl skill.

```
npm install -g @xdevplatform/xurl
```

```
go install github.com/xdevplatform/xurl@latest.
```

Command or snippet documented by the upstream xurl skill.

```
go install github.com/xdevplatform/xurl@latest
```

```
xurl auth status.
```

Command or snippet documented by the upstream xurl skill.

```
xurl auth status
```

```
xurl auth oauth2.
```

Command or snippet documented by the upstream xurl skill.

```
xurl auth oauth2
```

```
xurl auth apps list.
```

Command or snippet documented by the upstream xurl skill.

```
xurl auth apps list
xurl auth default my-app
xurl auth default my-app alice
xurl --app dev-app /2/users/me
```

## Gotchas

- Never read, print, summarize, upload, or paste ~/.xurl into LLM context.
- Never ask the user to paste client secrets, bearer tokens, or OAuth tokens into chat.
- Never use --verbose in agent runs; it can expose auth headers.
- Do not run auth commands with inline secret flags in an agent session.

---
Generated by SkillMake from https://github.com/steipete/agent-scripts/tree/main/skills/xurl on 2026-05-27T20:56:58.132Z.
Verify against source before relying on details.

File: ~/.claude/skills/xurl/SKILL.md