/mktg-x — authenticated Twitter/X reader

Read tweets, threads, bookmarks, articles, and user timelines from X (formerly Twitter) using an authenticated flow. Hits X's web GraphQL API with session cookies so /cmo, source-digestion workflows, and any other mktg skill can read auth-walled X content without a browser.

Firecrawl and WebFetch can't reach this content — Twitter serves a degraded logged-out page to unauthenticated clients. mktg-x is the only path.

On Activation

Verify auth credentials are set. mktg-x needs two env vars — a session token and a CSRF token. If neither is set, fail loud — do NOT fall back to firecrawl or WebFetch:

Priority	Session token env var	CSRF token env var
1 (preferred)	`MKTG_X_AUTH_TOKEN`	`MKTG_X_CT0`
2 (explicit legacy compat)	`TWITTER_AUTH_TOKEN` or `AUTH_TOKEN` with `MKTG_X_ENABLE_LEGACY_ENV=1`	`TWITTER_CT0` or `CT0` with `MKTG_X_ENABLE_LEGACY_ENV=1`

The script resolves credentials in priority order. If no session token or CSRF token is found via any name, it emits the frozen error shape and exits with code 2. See references/auth.md for how to obtain both values from your browser and export them.

Headless agent warning: do NOT rely on browser-cookie extraction in headless environments. On macOS, Chrome's cookie database is Keychain-encrypted — the extraction flow triggers a GUI password prompt that a headless agent cannot answer and will hang indefinitely. Always use env vars for agent workflows.