x-developer 2.4.8 → 2.4.9

package/skills/x-twitter-scraper/references/mcp-tools.md

@@ -7,9 +7,9 @@ The MCP server at `https://xquik.com/mcp` provides 2 structured API tools. The a
 | Tool | Description | Cost |
 |------|-------------|------|
 | `explore` | Search the API endpoint catalog (read-only, no network calls) | Free |
-| `xquik` | Execute API calls against your account | Varies by endpoint |
+| `xquik` | Send confirmed Xquik API requests | Varies by endpoint |
 
-### `explore` — Search the API Spec
+### `explore` - Search the API Spec
 
 The tool provides an in-memory `spec.endpoints` array. Filter/search it to find endpoints before calling them.
 
@@ -40,10 +40,23 @@ async () => spec.endpoints.filter(e => e.category === 'x-write');
 async () => spec.endpoints.filter(e => e.summary.toLowerCase().includes('tweet'));
 ```
 
-### `xquik` — Execute API Calls
+### `xquik` - Send API Requests
 
 The tool provides `xquik.request()` with auth injected automatically. Never pass API keys.
 
+## Safety Gates
+
+Apply these gates before using `xquik`:
+
+| Capability | Rule |
+|------------|------|
+| Public writes | Show the exact tweet, reply, like, retweet, follow, unfollow, profile, or community action and wait for explicit approval. |
+| Direct messages | Show sender, recipient, and message text. Never send bulk or automatic DMs. |
+| Persistent resources | Create monitors and webhooks only when the user explicitly asks for ongoing delivery. Show target, event types, URL, and ongoing cost before creation. |
+| Private reads | Confirm before fetching DMs, bookmarks, notifications, or home timeline. Do not forward returned private data to other tools without consent. |
+| Billing or payments | Do not call checkout, top-up, or MPP payment endpoints unless the user explicitly asks and confirms the exact amount. |
+| X account login | Never ask for or submit X login material. Account connection and re-authentication happen in the dashboard. |
+
 ```typescript
 declare const xquik: {
   request(path: string, options?: {
@@ -70,22 +83,21 @@ Use `explore` first to find endpoints, then `xquik` to call them.
 | Trending topics by region (X) | `GET /api/v1/trends?woeid=1` |
 | Trending news from 7 sources | `GET /api/v1/radar` (via `xquik` tool) |
 | Activity from monitored accounts | `GET /api/v1/events` |
-| Budget, plan, usage percent | `GET /api/v1/account` |
-| Monitor an X account | `POST /api/v1/monitors` |
-| Set up webhook notifications | `POST /api/v1/webhooks` |
+| Credit balance, plan, monitor billing | `GET /api/v1/account` |
+| Monitor an X account | `POST /api/v1/monitors` (persistent; confirmation required) |
+| Set up webhook notifications | `POST /api/v1/webhooks` (persistent; confirmation required) |
 | Run a giveaway draw | `POST /api/v1/draws` |
-| Subscribe or manage billing | `POST /api/v1/subscribe` |
 | Compose/draft a tweet | `POST /api/v1/compose` (3-step: compose, refine, score) |
 | Link your X username | `PUT /api/v1/account/x-identity` |
 | Analyze tweet style | `POST /api/v1/styles` |
 | Get cached style | `GET /api/v1/styles/{username}` |
 | Compare two styles | `GET /api/v1/styles/compare` |
-| Post a tweet | `POST /api/v1/x/tweets` (requires connected account) |
-| Like/unlike a tweet | `POST`/`DELETE /api/v1/x/tweets/{id}/like` |
-| Retweet | `POST /api/v1/x/tweets/{id}/retweet` |
-| Follow/unfollow | `POST`/`DELETE /api/v1/x/users/{id}/follow` |
-| Send a DM | `POST /api/v1/x/dm/{userId}` |
-| Upload media | `POST /api/v1/x/media` |
+| Post a tweet | `POST /api/v1/x/tweets` (confirmation required) |
+| Like/unlike a tweet | `POST`/`DELETE /api/v1/x/tweets/{id}/like` (confirmation required) |
+| Retweet | `POST /api/v1/x/tweets/{id}/retweet` (confirmation required) |
+| Follow/unfollow | `POST`/`DELETE /api/v1/x/users/{id}/follow` (confirmation required) |
+| Send a DM | `POST /api/v1/x/dm/{userId}` (confirmation required) |
+| Upload media | `POST /api/v1/x/media` (confirmation required before use in a post or profile change) |
 | Open support ticket | `POST /api/v1/support/tickets` |
 | List support tickets | `GET /api/v1/support/tickets` |
 | Get user's recent tweets | `GET /api/v1/x/users/{id}/tweets` |
@@ -93,13 +105,12 @@ Use `explore` first to find endpoints, then `xquik` to call them.
 | Get user's media tweets | `GET /api/v1/x/users/{id}/media` |
 | Get tweet favoriters (who liked) | `GET /api/v1/x/tweets/{id}/favoriters` |
 | Get mutual followers | `GET /api/v1/x/users/{id}/followers-you-know` |
-| Get bookmarks | `GET /api/v1/x/bookmarks` |
+| Get bookmarks | `GET /api/v1/x/bookmarks` (private; confirmation required) |
 | Get bookmark folders | `GET /api/v1/x/bookmarks/folders` |
-| Get notifications | `GET /api/v1/x/notifications` |
-| Get home timeline | `GET /api/v1/x/timeline` |
-| Get DM history | `GET /api/v1/x/dm/{userId}/history` |
+| Get notifications | `GET /api/v1/x/notifications` (private; confirmation required) |
+| Get home timeline | `GET /api/v1/x/timeline` (private; confirmation required) |
+| Get DM history | `GET /api/v1/x/dm/{userId}/history` (private; confirmation required) |
 | Check credit balance | `GET /api/v1/credits` |
-| Top up credits | `POST /api/v1/credits/topup` |
 
 Use `POST /api/v1/extractions` ONLY for bulk data that simpler endpoints cannot provide (all followers, all replies to a tweet, community members, etc.). Always call `POST /api/v1/extractions/estimate` first.
 
@@ -107,7 +118,7 @@ Use `POST /api/v1/extractions` ONLY for bulk data that simpler endpoints cannot
 
 | Workflow | Steps |
 |----------|-------|
-| **Set up real-time alerts** | `POST /monitors` -> `POST /webhooks` -> `POST /webhooks/{id}/test` |
+| **Set up real-time alerts** | Confirm target, event types, destination, and cost -> `POST /monitors` -> `POST /webhooks` -> `POST /webhooks/{id}/test` |
 | **Run a giveaway** | `GET /account` -> `POST /draws` |
 | **Bulk extraction** | `POST /extractions/estimate` -> `POST /extractions` -> `GET /extractions/{id}` |
 | **Compose optimized tweet** | `POST /compose` (step=compose -> refine -> score) |
@@ -124,7 +135,7 @@ Use `POST /api/v1/extractions` ONLY for bulk data that simpler endpoints cannot
 | Using `compose` when user wants to send a tweet | `POST /compose` is for drafting. Use `POST /x/tweets` to send |
 | Using `POST /x/tweets` when user wants help writing | Use the 3-step compose flow instead |
 | Falling back to web search when API call fails | Use free data already fetched (radar, styles, compose). Never discard it |
-| Not checking subscription before paid calls | Always attempt the call. Handle 402 by calling `POST /subscribe` for checkout URL |
+| Not checking subscription before paid calls | Attempt the requested call. On 402, explain the billing issue and ask before any checkout or top-up action |
 | Passing API keys in code | Auth is injected automatically. Never include keys |
 | Using `explore` for API calls | `explore` is read-only spec search. Use `xquik` for actual API calls |
 | Looking up follow/DM by username | Follow and DM endpoints need numeric user ID. Look up via `GET /x/users/{username}` first |
@@ -142,5 +153,5 @@ These are NOT available via the MCP server:
 
 ## Cost Reference
 
-- **Free**: account info, compose (all steps), styles (cached lookup/save/delete/compare), drafts, radar (via `xquik` tool, all 7 sources), subscribe, API keys, X account management, support tickets, credits (balance check, top up)
-- **Subscription required**: tweet search, user lookup, tweet lookup, follow check, media download (first only, cached free), extractions, draws, style analysis (X API refresh), performance analysis, trends, all write actions (tweet, like, retweet, follow, DM, profile, media upload, communities)
+- **Free**: account info, compose (all steps), styles (cached lookup/save/delete/compare), drafts, radar (via `xquik` tool, all 7 sources), support tickets, credits balance check, webhook management
+- **Credit or subscription required**: tweet search, user lookup, tweet lookup, follow check, media download (first only, cached free), extractions, draws, active monitors, style analysis (X API refresh), performance analysis, trends, and confirmation-gated write actions (tweet, like, retweet, follow, DM, profile, media upload, communities)

package/skills/x-twitter-scraper/references/pricing.md

@@ -6,10 +6,14 @@ Xquik is the most affordable X data API available. All metered operations deduct
 
 | | |
 |---|---|
-| **Base plan** | $20/month |
-| **Included monitors** | 1 |
-| **Additional monitors** | $5/month each |
-| **Credit value** | 1 credit = $0.00015 |
+| **Starter** | $20/month, 140,000 included credits |
+| **Pro** | $99/month, 770,000 included credits |
+| **Business** | $199/month, 1,670,000 included credits |
+| **Monitor slots** | Unlimited |
+| **Active monitors** | 21 credits/hour each, about 500 credits/day |
+| **PAYG/top-up credit value** | 1 credit = $0.00015 |
+
+Subscription credits are added each billing period, and unused credits carry over. Top-up credits do not expire.
 
 ## Per-Operation Costs
 
@@ -48,7 +52,7 @@ Xquik is the most affordable X data API available. All metered operations deduct
 
 ### Write operations - 10 credits ($0.0015)
 
-All write actions: create/delete tweet, like, unlike, retweet, follow, unfollow, send DM, update profile/avatar/banner, upload media, community actions.
+All confirmation-gated write actions: create/delete tweet, like, unlike, retweet, follow, unfollow, send DM, update profile/avatar/banner, upload media, community actions.
 
 ### Extractions & draws
 
@@ -60,21 +64,25 @@ Draws: 1 credit per participant. Extraction cost depends on the tool type:
 | 1 | Followers, following, verified followers |
 | 5 | Articles |
 
+### Active monitors
+
+Active account and keyword monitors cost 21 credits/hour each. Events and webhook delivery are included.
+
 ### Free operations ($0)
 
-Monitors, webhooks, account status, radar (7 sources), extraction/draw history, cost estimates, tweet composition (compose, refine, score), style cache management, drafts, support tickets, API key management, X account management.
+Webhooks, account status, radar (7 sources), extraction/draw history, cost estimates, tweet composition (compose, refine, score), style cache management, drafts, support tickets, and X account listing.
 
 ## Price Comparison vs Official X API
 
 | | Xquik | Official X pay-per-usage | Notes |
 |---|---|---|---|
-| **Access model** | **$20/month full API, plus pay-per-use options** | No subscriptions or commitments | Basic and Pro are legacy package names |
+| **Access model** | **Starter/Pro/Business subscriptions, credit top-ups, and MPP** | No subscriptions or commitments | Basic and Pro are legacy package names |
 | **Cost per post read** | **$0.00015** | $0.005 per resource | Xquik is about 33x cheaper |
 | **Cost per user lookup** | **$0.00015** | $0.010 per resource | Xquik is about 67x cheaper |
 | **Cost per trend read** | **$0.00045** | $0.010 per resource | Xquik is about 22x cheaper |
 | **Write actions** | **$0.0015** | $0.015 content or interaction create; $0.200 content create with URL | Xquik is 10x cheaper for matching $0.015 write classes |
 | **Bulk extraction** | **$0.00015/result** | Charged per returned resource | Built-in extraction jobs are included with Xquik |
-| **Monitoring + webhooks** | **Free** | No direct monitor product in pricing table | Real-time delivery is included |
+| **Monitoring + webhooks** | Active monitors are metered; webhooks included | No direct monitor product in pricing table | Real-time delivery is included |
 | **Giveaway draws** | **$0.00015/entry** | No comparable draw product | Draw engine is included |
 
 Source: [official X API pricing](https://docs.x.com/x-api/getting-started/pricing), which lists current pay-per-usage read and write rates.
@@ -83,9 +91,9 @@ Source: [official X API pricing](https://docs.x.com/x-api/getting-started/pricin
 
 Two options without a monthly subscription:
 
-**Credits**: Top up credits via `POST /credits/topup` ($10 minimum). 1 credit = $0.00015. Works with all 113 endpoints.
+**Credits**: Start a credit top-up checkout only after explicit confirmation. 1 top-up credit = $0.00015. Works with all supported endpoints.
 
-**MPP**: 32 X-API endpoints accept anonymous on-chain payments. No account needed.
+**MPP**: 32 X-API endpoints accept optional per-call payments. Show the exact amount and get explicit confirmation before starting any payment flow.
 
 | Endpoint | Price | Unit |
 |----------|-------|------|
@@ -122,14 +130,16 @@ Two options without a monthly subscription:
 | `GET /x/users/{id}/mentions` | $0.00015 | per tweet |
 | `GET /x/users/{id}/verified-followers` | $0.00015 | per user |
 
-SDK: `npm i mppx viem` (TypeScript). Handles the 402 challenge/credential flow automatically.
+SDK: `npm i mppx@0.6.15 viem@2.48.8` (TypeScript). Handles the 402 payment challenge flow.
 
 ## Credits
 
-Prepaid credits for metered operations. 1 credit = $0.00015. Top up via `POST /credits/topup` ($10 minimum).
+Prepaid credits for metered operations. Top-up credits cost $0.00015 each. Start top-up checkout via `POST /credits/topup` only after explicit confirmation ($10 minimum).
+
+Check balance: `GET /credits` - returns `balance`, `lifetimePurchased`, `lifetimeUsed`, and auto-top-up fields.
 
-Check balance: `GET /credits` - returns `balance`, `lifetimePurchased`, `lifetimeUsed`.
+## Credit Top-Ups
 
-## Extra Usage
+Use `POST /credits/topup` to create a hosted checkout session, `GET /credits/topup/status?session_id=...` to poll checkout completion, and `POST /credits/quick-topup` to charge a saved payment method after explicit confirmation of the exact amount. Quick top-up returns `charged`, `no_payment_method`, or `requires_action`.
 
-Enable from dashboard to continue metered calls beyond included allowance. Tiered spending limits: $5 -> $7 -> $10 -> $15 -> $25 (increases with each paid overage invoice).
+Automatic top-up can be configured from the dashboard. `GET /credits` and `GET /account` expose whether it is enabled, the dollar amount, and the trigger threshold.

package/skills/x-twitter-scraper/references/python-examples.md

@@ -51,7 +51,7 @@ estimate = xquik_fetch("/extractions/estimate", method="POST", json_body={
 })
 
 if not estimate["allowed"]:
-    print(f"Would exceed quota: {estimate['projectedPercent']}%")
+    print(f"Need {estimate['creditsRequired']} credits; available {estimate['creditsAvailable']}")
     exit()
 
 # Step 2: Create job

package/skills/x-twitter-scraper/references/types.md

@@ -24,29 +24,55 @@ Copy-pasteable TypeScript types for all Xquik API objects.
 
 interface Account {
   plan: "active" | "inactive";
-  pricingVersion: number;
   monitorsAllowed: number;
   monitorsUsed: number;
-  currentPeriod?: {
-    start: string;
-    end: string;
-    usagePercent: number;
+  monitorBilling: {
+    activeDailyEstimate: string;
+    activeHourlyBurn: string;
+    creditsPerActiveMonitorDay: string;
+    creditsPerActiveMonitorHour: string;
+    eventsIncluded: boolean;
+    instantCheckIntervalSeconds: number;
+    unlimitedSlots: boolean;
   };
+  creditInfo?: {
+    balance: string;
+    lifetimePurchased: string;
+    lifetimeUsed: string;
+    autoTopupEnabled: boolean;
+    autoTopupAmountDollars: number;
+    autoTopupThreshold: string;
+  };
+  xUsername?: string;
 }
 
 // ─── Credits ────────────────────────────────────────────
 
 interface CreditBalance {
-  balance: number;              // Current credit balance
-  lifetimePurchased: number;    // Total credits purchased
-  lifetimeUsed: number;         // Total credits consumed
-  autoTopUp: boolean;           // Whether auto top-up is enabled
+  balance: string;              // Current credit balance, bigint string
+  lifetimePurchased: string;    // Total credits purchased, bigint string
+  lifetimeUsed: string;         // Total credits consumed, bigint string
+  autoTopupEnabled: boolean;    // Whether auto top-up is enabled
+  autoTopupAmountDollars: number; // Dollar amount charged by auto top-up
+  autoTopupThreshold: string;   // Trigger threshold, bigint string
 }
 
 interface CreditTopUpResponse {
   url: string;                  // Checkout URL
 }
 
+type CreditQuickTopUpResponse =
+  | {
+      outcome: "charged";
+      credits: string;          // Credits added, bigint string
+      balance: string;          // New balance, bigint string
+    }
+  | { outcome: "no_payment_method" }
+  | {
+      outcome: "requires_action";
+      clientSecret: string;     // Complete required cardholder action
+    };
+
 // ─── API Keys ────────────────────────────────────────────
 
 interface ApiKeyCreated {
@@ -279,10 +305,11 @@ interface ExtractionList {
 
 interface ExtractionEstimate {
   allowed: boolean;
+  creditsAvailable: string;
+  creditsRequired: string;
   source: "replyCount" | "retweetCount" | "quoteCount" | "followers" | "unknown";
   estimatedResults: number;
-  usagePercent: number;
-  projectedPercent: number;
+  resolvedXUserId?: string;
   error?: string;
 }
 
@@ -811,9 +838,10 @@ interface McpExtractionJob {
 interface McpExtractionEstimate {
   allowed?: boolean;          // Whether the extraction is allowed within budget
   estimatedResults?: number;  // Estimated number of results
-  projectedPercent?: number;  // Projected usage percent after extraction
-  usagePercent?: number;      // Current usage percent of monthly quota
+  creditsRequired?: string;   // Required credits, bigint string
+  creditsAvailable?: string;  // Available credits, bigint string
   source?: string;            // Data source used for estimation
+  resolvedXUserId?: string;   // Resolved user ID for username-based estimates
   error?: string;             // Error message if estimation failed
 }
 
@@ -862,14 +890,27 @@ interface McpDrawDetails {
 // ─── MCP: get-account ───────────────────────────────────
 
 interface McpAccount {
-  plan: string;               // Current plan name (free or subscriber)
-  monitorsAllowed: number;    // Maximum monitors allowed on current plan
+  plan: "active" | "inactive";
+  monitorsAllowed: number;    // Deprecated; monitor slots are unlimited
   monitorsUsed: number;       // Number of active monitors
-  currentPeriod?: {           // Current billing period (present only with active subscription)
-    start: string;            // ISO 8601 period start date
-    end: string;              // ISO 8601 period end date
-    usagePercent: number;     // Percent of monthly quota consumed
+  monitorBilling: {
+    activeDailyEstimate: string;
+    activeHourlyBurn: string;
+    creditsPerActiveMonitorDay: string;
+    creditsPerActiveMonitorHour: string;
+    eventsIncluded: boolean;
+    instantCheckIntervalSeconds: number;
+    unlimitedSlots: boolean;
+  };
+  creditInfo?: {
+    balance: string;
+    lifetimePurchased: string;
+    lifetimeUsed: string;
+    autoTopupEnabled: boolean;
+    autoTopupAmountDollars: number;
+    autoTopupThreshold: string;
   };
+  xUsername?: string;
 }
 
 // ─── MCP: get-trends ────────────────────────────────────
@@ -955,7 +996,7 @@ interface ConnectedXAccount {
 }
 
 // Connecting an X account is done by the user in the Xquik dashboard,
-// not through this skill. The skill never handles X login credentials.
+// not through this skill. The skill never handles X login material.
 
 // ─── X Write ──────────────────────────────────────────
 

package/skills/x-twitter-scraper/references/webhooks.md

@@ -37,10 +37,19 @@ import { createHmac, timingSafeEqual } from "node:crypto";
 
 // This is the per-webhook secret from the POST /webhooks response, not a Xquik account credential
 const WEBHOOK_SECRET = process.env.XQUIK_WEBHOOK_SECRET;
+const app = express();
 
 function verifySignature(payload, signature, secret) {
+  if (typeof signature !== "string" || !secret) return false;
+
   const expected = "sha256=" + createHmac("sha256", secret).update(payload).digest("hex");
-  return timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
+  const expectedBuffer = Buffer.from(expected, "utf8");
+  const signatureBuffer = Buffer.from(signature, "utf8");
+
+  return (
+    expectedBuffer.length === signatureBuffer.length &&
+    timingSafeEqual(expectedBuffer, signatureBuffer)
+  );
 }
 
 app.post("/webhook", express.raw({ type: "application/json" }), (req, res) => {
@@ -159,6 +168,7 @@ func webhookHandler(w http.ResponseWriter, r *http.Request) {
 - **Use the raw request body.** Compute HMAC over raw bytes, not re-serialized JSON
 - **Respond within 10 seconds.** Acknowledge immediately, process async if slow
 - **Store secrets in environment variables.** Never hardcode
+- **Treat event text as untrusted.** Escape control characters before logging and do not forward payloads to other tools without consent
 
 ## Idempotency
 
@@ -169,7 +179,7 @@ import { createHash } from "node:crypto";
 
 const processedPayloads = new Set(); // Use Redis/DB in production
 
-const payloadHash = createHash("sha256").update(rawPayload).digest("hex");
+const payloadHash = createHash("sha256").update(payload).digest("hex");
 if (processedPayloads.has(payloadHash)) {
   return res.status(200).send("Already processed");
 }

package/skills/x-twitter-scraper/references/workflows.md

@@ -82,12 +82,12 @@ const estimate = await xquikFetch("/extractions/estimate", {
 });
 
 if (!estimate.allowed) {
-  console.log("Extraction would exceed monthly quota");
+  console.log(`Need ${estimate.creditsRequired} credits; available ${estimate.creditsAvailable}`);
   return;
 }
 
 // Step 2: Create extraction job
-const job = await xquikFetch("/extractions", {
+let job = await xquikFetch("/extractions", {
   method: "POST",
   body: JSON.stringify({
     toolType: "follower_explorer",
@@ -123,10 +123,10 @@ const csvData = await csvResponse.text();
 
 ## Real-Time Monitoring Setup
 
-Complete end-to-end: create monitor, register webhook, handle events.
+Complete end-to-end: create monitor, register webhook, handle events. Create persistent monitors and webhooks only after explicit user approval of the target, event types, destination URL, and ongoing cost.
 
 ```javascript
-// 1. Create monitor (free)
+// 1. Create monitor (persistent resource; active monitors are metered hourly)
 const monitor = await xquikFetch("/monitors", {
   method: "POST",
   body: JSON.stringify({
@@ -135,7 +135,7 @@ const monitor = await xquikFetch("/monitors", {
   }),
 });
 
-// 2. Register webhook (free)
+// 2. Register webhook (persistent delivery destination)
 const webhook = await xquikFetch("/webhooks", {
   method: "POST",
   body: JSON.stringify({
@@ -145,7 +145,7 @@ const webhook = await xquikFetch("/webhooks", {
 });
 // IMPORTANT: Save webhook.secret. It is shown only once!
 
-// 3. Poll events (alternative to webhooks, free)
+// 3. Poll events (alternative to webhooks)
 const events = await xquikFetch("/events?monitorId=7&limit=50");
 ```
 
@@ -156,7 +156,7 @@ Event types: `tweet.new`, `tweet.quote`, `tweet.reply`, `tweet.retweet`, `webhoo
 | Goal | Endpoint | Cost |
 |------|----------|------|
 | **Get a single tweet** by ID/URL | `GET /x/tweets/{id}` | 1 credit |
-| **Get an X Article** by tweet ID | `GET /x/articles/{id}` | 7 credits |
+| **Get an X Article** by tweet ID | `GET /x/articles/{id}` | 5 credits |
 | **Search tweets** by keyword/hashtag | `GET /x/tweets/search?q=...` | 1 credit/tweet |
 | **Get a user profile** | `GET /x/users/{username}` | 1 credit |
 | **Get user's recent tweets** | `GET /x/users/{id}/tweets` | 1 credit/tweet |
@@ -164,7 +164,7 @@ Event types: `tweet.new`, `tweet.quote`, `tweet.reply`, `tweet.retweet`, `webhoo
 | **Get user's media tweets** | `GET /x/users/{id}/media` | 1 credit/result |
 | **Get tweet favoriters** | `GET /x/tweets/{id}/favoriters` | 1 credit/result |
 | **Get mutual followers** | `GET /x/users/{id}/followers-you-know` | 1 credit/result |
-| **Check follow relationship** | `GET /x/followers/check?source=A&target=B` | 7 credits |
+| **Check follow relationship** | `GET /x/followers/check?source=A&target=B` | 5 credits |
 | **Get trending topics** | `GET /trends?woeid=1` | 3 credits |
 | **Get radar (trending news)** | `GET /radar?source=hacker_news` | Free |
 | **Get bookmarks** | `GET /x/bookmarks` | 1 credit/result |
@@ -172,14 +172,14 @@ Event types: `tweet.new`, `tweet.quote`, `tweet.reply`, `tweet.retweet`, `webhoo
 | **Get notifications** | `GET /x/notifications` | 1 credit/result |
 | **Get home timeline** | `GET /x/timeline` | 1 credit/result |
 | **Get DM history** | `GET /x/dm/{userId}/history` | 1 credit/result |
-| **Monitor an X account** | `POST /monitors` | Free |
+| **Monitor an X account** | `POST /monitors` | Active monitors are metered hourly |
 | **Poll for events** | `GET /events` | Free |
-| **Receive events via webhook** | `POST /webhooks` | Free |
+| **Receive events via webhook** | `POST /webhooks` | Free; confirmation required for destination URL |
 | **Run a giveaway draw** | `POST /draws` | 1 credit/entry |
 | **Download tweet media** | `POST /x/media/download` | 1 credit/item |
 | **Extract bulk data** | `POST /extractions` | 1-5 credits/result |
 | **Check credits** | `GET /credits` | Free |
-| **Top up credits** | `POST /credits/topup` | Free |
+| **Top up credits** | `POST /credits/topup` | Exact amount confirmation required |
 | **Compose a tweet** | `POST /compose` | Free |
 | **Post a tweet** | `POST /x/tweets` | 10 credits |
 | **Like / Unlike a tweet** | `POST` / `DELETE /x/tweets/{id}/like` | 10 credits |