From x-twitter-scraper
Creates HMAC-signed webhooks delivering real-time X (Twitter) events like new tweets, mentions, monitored account activity, and giveaway completion to user URLs. Manages setup, testing, and secret rotation via Xquik API.
npx claudepluginhub xquik-dev/x-twitter-scraper --plugin x-twitter-scraperThis skill uses the workspace's default tool permissions.
Fire HTTPS POST callbacks to a user URL when an X event matches. Events come from monitors (account, hashtag, mention) and from draws.
Verifies tests pass on completed feature branch, presents options to merge locally, create GitHub PR, keep as-is or discard; executes choice and cleans up worktree.
Guides root cause investigation for bugs, test failures, unexpected behavior, performance issues, and build failures before proposing fixes.
Writes implementation plans from specs for multi-step tasks, mapping files and breaking into TDD bite-sized steps before coding.
Fire HTTPS POST callbacks to a user URL when an X event matches. Events come from monitors (account, hashtag, mention) and from draws.
| Endpoint | Purpose | Cost |
|---|---|---|
| POST /webhooks | Create a webhook | Subscription |
| GET /webhooks | List webhooks | Read tier |
| PATCH /webhooks/{id} | Enable/disable, rotate secret | Read tier |
| DELETE /webhooks/{id} | Remove a webhook | Read tier |
| POST /webhooks/{id}/test | Send a test payload | Read tier |
Base URL: https://xquik.com/api/v1. Auth: x-api-key: xq_... header.
POST /webhooks
{
"url": "https://example.com/xquik-hook",
"events": ["monitor.event", "draw.completed"],
"secret": "<optional; auto-generated if omitted>"
}
-> { webhook_id, secret }
Save the returned secret - used to verify HMAC-SHA256 signatures on incoming payloads.
Each delivery includes an X-Xquik-Signature header:
X-Xquik-Signature: sha256=<hex>
Verify by computing hmac_sha256(secret, raw_body) and constant-time comparing.
POST /webhooks/{id}/test to send a sample payload. Confirm with the user that it arrived and verified.PATCH /webhooks/{id}.X-Xquik-Signature HMAC - do not trust the payload without itMonitor creation: monitor-accounts. Full API: x-twitter-scraper.