xurl

Use xurl for X API work. Shortcut commands return JSON; raw mode works for any v2 endpoint.

Secret safety

• Never read, print, summarize, upload, or inspect ~/.xurl.
• Never ask user to paste tokens/secrets into chat.
• Do not run auth commands with inline secrets.
• Do not use --verbose in agent sessions; it can expose auth headers.
• Check auth with xurl auth status.

Common shortcuts