Connecting X (Twitter) to AutoPost

Contents

0. Cover & contents

1. At a glance

2. Understanding the terms

3. Step A — Signing in to x.com with the right account

4. Step B — Connecting in AutoPost

5. Step C — Writing a post for X

6. Step D — Sending, scheduling, and checking the result

7. X quota and costs

8. What you can't do with X yet

9. Managing connected accounts

10. Troubleshooting

11. Questions and answers

12. Security and privacy

13. User checklist

14. Appendix — For the AutoPost administrator

1. At a glance

What you will achieve

After following this guide, AutoPost can publish posts to your X (formerly Twitter) account — text only, or text with one photo, GIF, or video — right when you press Send now, or automatically at the time you schedule.

It works through X's official permission with AutoPost's own X app (named AutoPost PT SKK). You don't create an app, you don't enter any keys, you don't buy X API credits, and you never give your X password to AutoPost. You just approve the permission once on X's page.

Who does what

This guide is written for two readers.

Users only need chapters 1–13. The appendix in chapter 14 explains the behind-the-scenes work that makes the Connect X button usable.

Status of AutoPost & X (30 September 2026)

We state this plainly so there are no surprises.

• The AutoPost X app (AutoPost PT SKK) is registered in PT SKK's X console and is active for all AutoPost users. Unlike TikTok, there is no test mode and no list of accounts that has to be registered first.

• On 30 September 2026 the full flow was tried for real on production AutoPost: an X account was connected, then one text + photo post went live at 19:45 WIB (UTC+7) and one text + video post went live at 19:52 WIB.

• The X API is paid for every post, and AutoPost covers the cost. That's why there is a monthly quota: each AutoPost account may send 60 X posts per month, up to 10 of them with a link. Details are in chapter 7.

Time estimate

What you need

What AutoPost sends to X

What goes live on X is exactly the same as what the X preview card in New post shows (5.4). AutoPost doesn't add any hashtags, watermarks, or promotional text.

2. Understanding the terms

3. Step A — Signing in to x.com with the right account

AutoPost connects the X account that is signed in to your browser. So check the account before you press any button.

1. In the same browser as AutoPost, open x.com.

2. If you aren't signed in yet, sign in with the X account you want to connect.

3. If a different account is signed in (for example, your personal account when you want the business one), sign out first or switch accounts on x.com.

4. Step B — Connecting in AutoPost

4.1 Opening the X page

1. In AutoPost, open the Social accounts menu.

2. On the X (Twitter) card, press Connect (it says Manage if an X account is already connected). The X (Twitter) page opens.

The X (Twitter) page opens with a black X tile in the title and a short description:

Below it is a yellow-bordered box Monthly X quota — API costs covered by AutoPost with this month's usage (chapter 7), then the How to connect card with four numbered steps and the Connect X button, and the Connected accounts card on the right. Before any account is connected, that card says 0 of 3 and "Nothing connected yet."

4.2 Pressing Connect X

1. Make sure the right X account is signed in on x.com (Step A).

2. Press the gold Connect X button in the How to connect card.

3. The browser moves to X's permission screen. Finish within 10 minutes.

4.3 Approving the permission on X's screen

X shows its permission screen: "AutoPost PT SKK wants to access permissions on your account".

Read the screen from top to bottom:

The permission sentences in the right column and what they mean for AutoPost:

The sentences on that screen are X's standard wording for each permission; X doesn't offer narrower permissions.

4.4 What AutoPost does behind the scenes

1. When Connect X is pressed, AutoPost creates a random security code (state) and a PKCE code pair, then stores them encrypted in a browser cookie that is valid for 10 minutes.

2. After you press Authorize app, X sends you back to AutoPost's return address. AutoPost checks that the security code matches and that you are still signed in with the same AutoPost account.

3. X's authorization code lives for only 30 seconds, so AutoPost immediately exchanges it for an access token (2 hours) and a refresh token.

4. AutoPost checks that the posting permission was really granted, then reads your X profile (name, @username, profile photo).

5. AutoPost makes sure that X account isn't already connected to another AutoPost account.

6. The tokens are stored encrypted (AES-256-GCM) in the database. The temporary cookie is deleted.

7. If any of the steps above fails, the token just received is revoked right away on X, so no permission is left behind without an account in AutoPost.

4.5 Signs of success

You return to the X (Twitter) page in AutoPost. A green message appears at the top:

On the right side of the page, your account appears in the Connected accounts card (counter "1 of 3") with the green label connected, the display name and the note permission renewed automatically, the time it was connected, the Retest button, and the red Disconnect button.

The How to connect card on the left stays visible. Below the Connect X button is a blue Permissions requested box that explains all five permissions — the same as the table in 4.3.

4.6 Reconnecting the same account

If the same X account is connected again, AutoPost doesn't record it twice; only its token is replaced. A green banner reads:

4.7 What "1 of 3" means

Each AutoPost account can connect at most 3 X accounts. This limit is enforced in the database. Once there are 3, the text next to the button reads "Already 3 accounts: this button can only reconnect the same account. Disconnect one account to add a new one." A fourth account is rejected with the message "There are already 3 X accounts. Disconnect one first if you want to replace it."

The monthly quota (chapter 7) applies per AutoPost account, not per X account — three X accounts share the same 60 posts.

4.8 Adding a 2nd and 3rd X account

1. On x.com, sign out of the first X account and sign in with the next one (or choose another account with the arrow on the permission screen).

2. In AutoPost, press Connect X again and approve the permission (the flow is the same as for the first account; we haven't tried it with a second account yet).

5. Step C — Writing a post for X

5.1 Quick rules before you write

The same rules are written in the X rules box on the Social accounts › X page:

• Text can be at most 280 characters as X counts them: every link counts as 23, emoji and Japanese/Chinese/Korean characters count as 2. The Link field is sent on a new line and is counted too. Longer text is rejected — it's never silently cut.

• One media item per post (or no media): a JPEG, PNG, or WebP photo up to 5 MB; a GIF up to 15 MB; or an MP4/MOV video (AutoPost uploads up to 50 MB).

• A post can go to only ONE X account — X forbids the same text on several accounts. X also rejects text that is exactly the same as your previous post.

• X can't be used with Auto post or Link to post (chapter 8).

5.2 Ticking ONE X account

1. Open New post and write your text.

2. If needed, add a photo, GIF, or video with Upload from gallery.

3. In the Send to section, tap the X account until it is ticked (dark blue with a ✓ mark).

If you have more than one X account, only one can be ticked. Tapping a second X account replaces the first, with this note:

Want to post to two X accounts? Create two separate posts with different text.

5.3 The 280 count in Limits per platform

The Limits per platform card on the right counts your text for X the way X does:

The small note below the X row can say:

• "The Link field is added on a new line and counts as 23 characters."

• "X counting: link = 23, emoji & Japanese/Chinese/Korean characters = 2."

• "More than 280 is rejected by X — shorten it or deselect the X account."

• "Counted: sent + scheduled this month (WIB). The quota resets on the 1st; X API costs are covered by AutoPost."

Counting examples:

5.4 X preview

As soon as an X account is ticked, the X preview card appears in the right column. It shows:

• the selected X account name and the n/280 count (red if it's over);

• the final text exactly as it will be published — including the Link field added on a new line;

• the note: "This is the text that will be published on X" (plus "with one image" or "with one video" if there is media), the counting rule, then "With a link: uses the linked-post quota." or "No link."

5.5 Links and the link quota

X posts that contain a link cost much more (chapter 7), so they have a separate quota: 10 posts with a link per month.

As soon as your post counts as having a link, a yellow box appears below Send to:

The X preview also shows the link on the last line, and the count goes up by 23 (plus 1 for the new line):

A post counts as having a link if:

• the Link field is filled in; or

• the text contains an address starting with http:// or https://; or

• the text contains a word.suffix pattern such as example.com or myshop.com — anywhere in it.

5.6 Media for X

• The size limits for photos and GIFs are checked in New post for files uploaded from your device. Media given as an address on another site is checked when sending.

• Alt text (if you fill it in) is attached to photos and GIFs on X (at most 1,000 characters). If X rejects it, the post still goes live with the note "Alt text wasn't set on X."

• For video, X recommends H.264 + AAC, at most 1280×1024, at most 60 fps. Videos outside that may be rejected while X processes them.

5.7 When the buttons are held

The send buttons can be held, with a red box above them. For X, the reasons are:

Drafts can still be saved when the quota or budget is used up, because drafts cost nothing. Scheduling for next month is still allowed too.

6. Step D — Sending, scheduling, and checking the result

6.1 Send now

1. Choose Send now (next to Save as draft and Schedule).

2. Check the X preview once more, then press the gold Send now button.

If it works, a green message appears:

(The number goes up if the same post is also sent to other platforms.)

For a video, X needs to process the file first. If processing takes longer than about 25 seconds, the message becomes:

That is not a failure. AutoPost checks the video status in the next worker round without uploading it again, then publishes it as soon as X has finished processing. Don't send the same post again.

6.2 Scheduling

1. Choose Schedule, then fill in the date and time (WIB).

2. Press Schedule post. "Post scheduled." appears.

The AutoPost worker sends it by itself at the right time. When you save a schedule, AutoPost immediately checks the quota for the month of that schedule — scheduled posts count from the moment they're scheduled, so your schedules don't quietly go over the quota. If that month's quota is already full, the schedule is rejected with a message that states the remaining quota, for example:

Before sending, the worker checks the quota once more and renews the token if needed. We haven't tested scheduling to X for real yet; it uses the same path as scheduling to other platforms.

6.3 Save draft

Drafts don't use the quota and aren't sent to X. A draft with an X account must still pass the 280 limit and the video format rule. In the Posts menu, that draft has a Send now button; when you press it, the quota is checked as usual.

6.4 Checking the result

Open the Posts menu. A successful post card has the green label sent, 1 account, and the time it was sent.

Then open your X profile. Posts from AutoPost look like ordinary posts.

The time on x.com follows your language and time zone settings; in the example above "7:45 PM" equals 19:45 WIB.

6.5 Resending failed posts

A failed post has a Resend failed button in the Posts menu. Before pressing it, open Details per account and read the reason (chapter 10.4), then fix the cause first.

7. X quota and costs

7.1 Why there is a quota

X charges for every post sent through its API, and AutoPost covers the cost — you don't need to buy X credits. As of 30 September 2026, X's rates are:

To be fair to all users, every AutoPost account gets a monthly quota. X can change its rates at any time; the latest figures are always in the X console.

7.2 What is counted

• Counted: posts sent this month, plus X posts that are scheduled and will be sent this month.

• Not counted: drafts, canceled posts, and sends that X definitely rejected (for example, rejected because the text was too long).

• Sends with an uncertain result (X didn't answer, 6.5) are still counted, because X may already have charged for them.

• Deleting a post in AutoPost, or disconnecting and then reconnecting the X account, doesn't restore the quota. Usage records are kept separately precisely so the cost history isn't lost.

• The quota is also tied to the X account: if the same X account is moved to another AutoPost account in the same month, that month's usage moves with it.

• Your usage figures appear in the Monthly X quota box on the Social accounts › X page and in Limits per platform in New post.

The Monthly X quota — API costs covered by AutoPost box on the Social accounts › X page has four items. The first three read:

1. "X charges for every post sent through its API, and AutoPost covers that cost — you don't need to buy X credits. To be fair to all users, every AutoPost account gets 60 X posts per month, up to 10 of them with a link (containing a web address or the Link field — posts with a link cost much more on X)."

2. "Months follow the WIB (UTC+7) calendar and the quota resets on the 1st. Scheduled posts count from the moment they're scheduled; drafts don't count."

3. "When the quota runs out, Send now and Schedule to X are held for that month (drafts can still be saved, and scheduling for next month is still allowed), and remaining X schedules that month fail with the message “The X quota for this month is used up” — they aren't retried automatically; resend from the 1st."

The fourth item covers the shared AutoPost X budget — explained in 7.5. Below the items you see this month's budget status and two figures, for example X posts October 2026 — 0/60 (60 posts left) and Of which with a link — 0/10 (10 posts with a link left).

7.3 When the quota resets

Months follow the WIB calendar, and the quota resets on the 1st of every month at 00:00 WIB. Unused quota doesn't carry over to the next month.

7.4 When your quota runs out

In New post, Send now and Schedule to X for this month are held, with a red box such as:

In addition:

• If only the link quota is used up, the message is: "The X quota for this month is used up (10/10 posts with a link — posts with a link cost much more on X). Remove the link, or wait for the quota to reset on the 1st." Posts without a link can still be sent.

• Any X schedules left that month fail with the message "The X quota for this month is used up (…). The quota resets on the 1st." and are not retried automatically. From the 1st, you can press Resend failed.

• Drafts can still be saved, and scheduling for next month is still allowed.

7.5 The shared AutoPost X budget

Besides your quota, there is a monthly AutoPost X budget shared by all users. This budget covers all paid calls (posts, alt text, and profile reads) from every user. The Social accounts › X page shows its status, for example "AutoPost's X budget for this month is still available (0% used)."

If that budget runs out:

• Send now and Schedule to X for that month are held with the message "AutoPost's X budget for this month has run out for all users — X posts can be sent again from the 1st."

• Existing X schedules are held — not discarded — and then sent automatically from the 1st. Details per account says: "AutoPost's X budget for this month is used up — this post is held and will be sent automatically from the 1st (WIB, UTC+7). Cancel the post if you don't want it published late."

• Drafts can still be saved.

Only when X itself is rejecting the AutoPost app (for example, AutoPost's credit balance on X is empty) are sends postponed and retried automatically every hour, with the message "AutoPost's X credit has run out — the administrator is topping it up; we'll retry automatically."

7.6 Why Retest also uses the budget

Every Retest (9.1) and every connection reads your profile from X — and X charges $0.010 for that, from the shared budget. Your post quota doesn't go down, but press Retest only when you need to.

8. What you can't do with X yet

9. Managing connected accounts

9.1 Retest

The Retest button in the Connected accounts card opens the token, renews it if less than 5 minutes remain, then reads your profile on X again. If the account is healthy, a yellow banner shows one of:

• "Retest finished — the account is still healthy and ready to send."

• "Retest finished — the account is healthy and we extended its token too."

If X is busy (rate limit, network, a brief outage), the account status is not changed; the message ends with "We didn't change the account status — try testing again shortly." If the permission has expired or was revoked, the account is labeled needs reconnecting. Other errors give the label has a problem. The cause appears in red text below the account name.

Retest also updates your name, @username, and profile photo if you changed them on X. Remember: every Retest uses a little of the shared budget (7.6).

9.2 Reconnecting

Press Connect X again and approve the permission with the same X account. AutoPost renews its token (it doesn't create a new account), and scheduled posts keep running (4.6).

Reconnect if:

• the account is labeled needs reconnecting;

• you revoked AutoPost's permission on x.com and want to use it again;

• Details per account says the X permission "is no longer valid" or "expired or was revoked".

9.3 Disconnect

The Disconnect button removes the account from AutoPost and revokes AutoPost's permission on X. AutoPost asks "Disconnect this account? AutoPost's permission on X is revoked and its token deleted."; press Yes, disconnect to continue. The result: "Account disconnected — its row and token are gone from the database."

If X won't revoke the permission (for example, the network dropped or the token is already dead), an extra yellow box appears:

Disconnecting also removes that account from scheduled posts aimed at it, and the old send records for that account in Details per account disappear too. This month's quota isn't restored (7.2). If you only want to renew the token, don't disconnect — reconnect instead (9.2).

We haven't actually disconnected an X account yet; the order and messages above follow AutoPost's code.

9.4 Revoking the permission on x.com

You can also revoke AutoPost's access directly on X: open x.com › Settings and privacy › Security and account access › Apps and sessions › Connected apps (the direct address is x.com/settings/connected_apps), choose AutoPost PT SKK, then revoke its access.

After that, the next send fails with the message "AutoPost's X permission is no longer valid (revoked or expired). Reconnect this account." and the account is labeled needs reconnecting. Disconnect that account in AutoPost if you don't want to use it any more.

10. Troubleshooting

All AutoPost messages below are copied exactly from AutoPost. On the X (Twitter) page, messages start with "Failed:"; in Details per account, messages that will be retried get the suffix "(retrying automatically, attempt N of 4)". Parts that vary are marked "…" or "N".

As of 30 September 2026 we have seen only the success path ourselves (connecting, a text + photo post, a text + video post, the quota box, the X preview). We haven't triggered the error messages in this chapter for real; their causes and fixes are written from AutoPost's code and X's documentation.

10.1 When pressing "Connect X" or returning from X

10.2 On Retest, Disconnect, or in the account status

10.3 In New post and when saving

The red "… is on hold:" box above the send button (and the message when the button is pressed):

Server messages when saving (rare, because New post already holds these first):

10.4 When sending or after scheduling

These messages appear in Details per account on the post card in the Posts menu.

Being processed — not an error:

Needs your action:

Retried automatically — just wait:

Messages for the administrator (not a problem with your post — report them to the administrator):

10.5 Problems that don't show an AutoPost message

11. Questions and answers

Do I have to create my own X app or buy X API credits?No. The X app belongs to AutoPost, and AutoPost covers the API costs. You just press Connect X, check I trust this app, then press Authorize app. X itself forbids services like AutoPost from requiring their users to create their own apps.

Why only 60 posts per month?Because X charges AutoPost for every post. The quota keeps costs fair for all users. 60 posts is enough for about two posts a day.

Why are posts with a link limited to 10?X charges more than 13 times as much for a post with a link as for a regular post ($0.20 versus $0.015). Tip: put the link in your X profile bio, then write "link in bio" in the post.

When does my quota reset?On the 1st of every month at 00:00 WIB.

Do drafts use the quota?No. Only posts that are sent and those scheduled for that month.

Can one post be sent to two of my X accounts at once?No. X forbids the same text on several accounts. Create two posts with different text.

Can I send the same text twice to the same X account?X rejects text that is exactly the same as a previous post. Change the text slightly.

Why is the X count different from a normal character count?Because X counts every link as 23 characters and emoji as 2. Always look at the number in the X preview.

Can I write more than 280 characters, for example on an X Premium account?Not yet. AutoPost uses the 280 limit for all accounts.

Can AutoPost read my direct messages (DMs) or my timeline?No. The permissions requested don't include direct messages, and AutoPost only reads your own profile.

Do I need to reconnect regularly?No. The access token (2 hours) is renewed automatically, and the AutoPost worker refreshes the permission of accounts that haven't been used for a while so it stays alive. You only need to reconnect if the permission was revoked.

Can I do this from the AutoPost Android app?Connecting an X account is web-only. Once connected, the X account can be chosen when writing on your phone, with the same 280 count.

How do I delete a post that has already gone live?On x.com. Deleting it in AutoPost only deletes AutoPost's record and doesn't restore the quota.

12. Security and privacy

12.1 What AutoPost stores

12.2 What never happens

• AutoPost never asks for or sees your X password.

• AutoPost doesn't post anything unless you press Send now, Schedule post, or Resend failed.

• AutoPost doesn't read your timeline, followers, or direct messages, and doesn't repost, like, or follow other accounts.

• What goes live is always exactly what the X preview shows — no extra hashtags or text.

12.3 Stopping X in AutoPost

1. Press Disconnect on the X account (9.3). AutoPost's permission on X is revoked and its token deleted.

2. If the box "AutoPost's permission on X couldn't be revoked automatically" appears, revoke it yourself on x.com (9.4).

13. User checklist

• Signed in to x.com with the right X account, in the same browser as AutoPost.

• Social accounts › X › Connect X → check I trust this app → Authorize app.

• Green message "… was connected after testing it with X" and the connected label in Connected accounts.

• New post: text written, media (if any) within the rules, ONE X account ticked.

• X preview checked: the count is no more than 280, the final text is right.

• If the yellow link quota box appears: do you really need the link? If not, remove it.

• Send now (or Schedule) → the message "Sent to 1 account." or "Not sent yet — … will be retried automatically".

• Posts menu: the sent label; X profile: the post is showing.

• Keep an eye on your remaining quota in Social accounts › X toward the end of the month.

14. Appendix — For the AutoPost administrator

This chapter is only for the AutoPost administrator (PT SKK). Regular users don't need to do any of it. All X console screens below are in English; labels are written exactly as shown.

14.1 Why one global app owned by PT SKK

X's policy (Restricted Uses → Multiple applications) states that requiring end users to register their own app in order to use a service can lead to sanctions against that service, its app, its customers, and its customers' X accounts. That's why AutoPost uses one X app owned by PT SKK for all users, and PT SKK buys the X API credits. The "user's own app" model (as AutoPost uses for Instagram and Threads) must not be used for X.

14.2 Signing up for the X Developer Console

1. Open console.x.com and sign in with the company's X account.

2. The Developer Program — "Tap Into What's Happening" form asks for:

   • Account Name — the developer account name.

   • Describe all of your use cases of X's data and API — write it honestly: AutoPost publishes posts composed by users to their own X accounts, with each user's OAuth 2.0 permission; it doesn't read timelines and doesn't sell data. According to X's policy, this description is binding; major changes must be reported to X.

   • Three checkboxes: you won't resell anything received from the X API; you accept the Developer Agreement, Incorporated Developer Terms, and X Developer Policy; you understand the developer account can be terminated for violations.

3. Submit the form.

Signing up and accepting the agreements is done by the administrator personally.

14.3 Dashboard and app list

After signing up, the Dashboard shows a greeting, three balance figures (Total Balance, Credits, Free Credits — all $0.00 at first), a Usage chart (costs over the last 30 days), and the Apps card. The left menu has Projects, Apps, Usage, and a Billing section (Credits, Payments, Billing information). At the top there's a suggestion to turn on auto-recharge and a Buy Credits button.

In the Apps menu, X has already created one default app ("This app was created to use the X API.") in the Default Project of type Pay Per Use, with status active. This is the app AutoPost uses; the + Create App button is only needed to create a new app. According to X's policy, a service may have at most three apps (development, staging, production).

14.4 Authentication settings

Open the app → the Settings button → Authentication settings. Fill in:

Press Save Changes.

When first opened, this form still has X's default choices — Read and Native App. Both must be changed:

After the change, Read and write and Web App, Automated App or Bot are selected:

Then fill in the App info section below it and save:

14.5 App keys → Vercel env

1. Go back to the app page, Keys & Tokens tab. The OAuth 2.0 Keys section holds the Client ID and Client Secret.

2. Copy the Client ID. For the Client Secret, press Regenerate if it was never saved — according to X's documentation, credentials are shown only once, and regenerating invalidates the old one.

3. The Bearer Token, Consumer Key, and Access Token (OAuth 1.0) are not used by AutoPost — don't create them.

4. In Vercel, open the project autopost-web › Settings › Environment Variables › Add Environment Variable.

5. Add two variables, environment Production:

   • X_CLIENT_ID = Client ID

   • X_CLIENT_SECRET = Client Secret

6. Press Save, then Redeploy the latest production deployment so the new values are picked up.

After the redeploy, the The X connection isn't open yet box on Social accounts › X disappears and the Connect X button becomes active. Pasting secret values is done by the administrator personally.

14.6 App name and logo

The app name and icon are shown to users on the permission screen (4.3). X gives its default app a long number as its name, so change it:

1. On the app page, press the pencil icon next to the app name. The Edit App Details dialog opens.

2. App name: AutoPost PT SKK (at most 32 characters).

3. App icon: Upload the AutoPost icon (JPG, GIF, or PNG, at most 700 KB).

4. Description: a short description of 10–200 characters, for example "AutoPost — a social media post scheduler by PT Solusi Kecerdasan Komputasi."

5. Press Save Changes.

Once saved, the Apps card on the Dashboard shows the app with its new name and icon. In the image below, credits have already been bought (14.7) and a small amount has been used for testing.

14.7 Buying credits

The X API uses a pay-per-use system: credits are bought up front, and each paid call deducts from the balance. Without credits, X rejects posts.

1. Open Billing › Credits. This page shows Remaining balance, Free credits, Auto Recharge (needs a saved payment method), Billing Cycle Cap, and Free Credits Voucher.

2. Press Purchase credits and follow X's payment steps. On 30 September 2026 PT SKK bought $10 in credits.

14.8 Setting a spending limit (Spend Cap)

So that the bill never goes over plan, set a spending limit per billing cycle:

1. In Billing › Credits, on the Billing Cycle Cap row, press Manage Spend Cap.

2. The Manage Spending Limit dialog opens. Uncheck Allow unlimited spending.

3. Enter 10 (US dollars) in Billing Cycle Spending Limit.

4. Press Save Settings.

Once saved, the Billing Cycle Cap row shows $10.00 together with this cycle's usage (Current Spend, a percent-used bar, and the days left in the cycle).

When that limit is reached, X blocks all API requests until the next cycle; in AutoPost, sends are postponed and retried every hour with the message "AutoPost's X credit has run out — the administrator is topping it up; we'll retry automatically."

14.9 Quota env (optional)

Without extra env variables, AutoPost uses the default figures. To change them, add env variables in Vercel (Production), then redeploy:

The quota figures on the Social accounts, Social accounts › X, and New post pages update by themselves.

14.10 Administrator checklist

• Developer account on console.x.com in PT SKK's name; honest use-case description.

• App in Default Project (Pay Per Use), status active.

• Authentication settings: Read and write · Web App, Automated App or Bot · Callback exactly …/api/sosial/x/kembali · Website URL · organization · terms · privacy · Save Changes.

• App name AutoPost PT SKK + AutoPost icon + description.

• X_CLIENT_ID and X_CLIENT_SECRET in Vercel (Production) → Redeploy.

• The "The X connection isn't open yet" box on Social accounts › X is gone.

• Credits bought; Spend Cap set (Allow unlimited spending unchecked).

• X_BATAS_BIAYA_BULANAN_USD no larger than the Spend Cap; X_API_BASE/X_AUTH_URL absent in production.

• Test once: connect the company X account, send one post without a link, check it on x.com and under Usage in the console.