Title: X Description: Set up X OAuth 1.0a user authentication for a self-hosted instance. Canonical: https://openpo.st/docs/self-hosting/integrations/x Source: [https://openpo.st/docs/self-hosting/integrations/x](https://openpo.st/docs/self-hosting/integrations/x) # X OpenPost uses X OAuth 1.0a user authentication to connect an account and publish on its behalf. Your X developer app needs the API access and user permissions for the actions you plan to use. ## Before you start - Set `OPENPOST_APP_URL` to your instance's public HTTPS origin. - Have access to the [X Developer Portal](https://developer.x.com/en/portal/dashboard) and an X account for a real connection test. - Check your X API plan and endpoint access. A successful OAuth connection does not establish posting, analytics, or Direct Message access. ## Configure the X app 1. In the [developer portal](https://developer.x.com/en/portal/dashboard), create a Project and App, or open an existing App. 2. In its user authentication settings, enable **OAuth 1.0a**. Choose **Read and write** permissions for publishing. Choose **Read, write, and Direct Messages** only if you will use OpenPost's optional Direct messages feature and your X API access supports it. 3. Register this callback URL, then save the user authentication settings: ```text https://post.example.com/api/v1/accounts/x/callback ``` 4. Open **Keys and tokens** and copy the **API Key** and **API Key Secret** (the OAuth 1.0a consumer credentials). Do not use the OAuth 2.0 Client ID and Client Secret in the JSON below. X explains [developer app permissions](https://docs.x.com/fundamentals/developer-apps) and the [OAuth 1.0a flow](https://docs.x.com/fundamentals/authentication/oauth-1-0a/overview).  Open user authentication settings before choosing permissions and registering the callback. ## Save the app in OpenPost Use this provider entry when [saving your app credentials](https://openpo.st/docs/self-hosting/integrations#save-your-provider-credentials). Replace the example domain with your OpenPost address. ```json [ { "provider": "x", "client_id": "your-x-api-key", "client_secret": "your-x-api-key-secret", "redirect_uri": "https://post.example.com/api/v1/accounts/x/callback" } ] ``` ## Connect and test 1. In **Settings → Workspace → Social accounts**, select **X** and authorize your account. 2. Publish a short text test. Confirm its status in OpenPost and open the post on X. 3. If you need media, analytics, comments, or Direct messages, test each with the same X app and account. Optional account features start disabled and need to be enabled per account. ## If it does not work - **OAuth fails:** Check that OAuth 1.0a is enabled and that the callback matches the configured URL exactly. Confirm you copied the API Key pair, not the OAuth 2.0 credentials. - **OAuth succeeds but a post fails:** Check app permission level, API plan, and the X error returned for that operation. Reconnect after changing permissions. - **Text or video rejected:** OpenPost uses the connected account's subscription tier when X provides it. When the tier is missing or stale, it applies standard limits until it can refresh the profile.