Give Your Agent the Pen

Here's the fear everyone has about AI and social media, said out loud: if my agent posts for me, am I still me?

Honest answer: only if you build it that way. The tool doesn't decide — the workflow does.

Why does this matter so much? Because trust is the whole currency here. Followers aren't a metric; they're a relationship. The day an audience suspects the voice they love is a ghost, the relationship is over — and they'd be right to leave. Authenticity isn't a vibe you perform; it's a structure you build. Ours has three load-bearing walls: drafts, not autoposts. Blessing, not abdication. And a 🌺 on everything the agent touched, so you always know who's talking.

This isn't automation. Automation is set it and forget it — this is the opposite. It's delegation with consent, every single morning, one tap at a time. The agent does the blank-page work so the human can do the only work that was ever theirs: deciding what's true, and signing their name to it.

The pen was never the point. The hand is. 🌺

1. Go to the developer console

   Open developer.x.com and sign in with your X account. Sign up for developer access — the free tier is plenty (it's posting-only, which is exactly what we're doing).

2. Create a Project and an App

   The console walks you through it: one project, one app inside it. Names don't matter — call it "my-agent". This app is the identity your agent will post through.

3. Set permissions BEFORE generating tokens

   In your app's User authentication settings, set app permissions to Read and write. Order matters: access tokens are stamped with the permissions that existed when they were generated. Set write first, then generate.

4. Collect your four keys

   From the Keys and tokens tab: API Key, API Key Secret, Access Token, Access Token Secret. Four strings. That's the whole credential set for OAuth 1.0a.

5. Vault them — chmod 600, never in chat

   Write them to a plain file only your agent can read (ours is /shared/.x-keys), then chmod 600 it. Keys never go in a prompt, a git repo, a chat message, or a dashboard. The script reads the file; nothing else ever sees the values.

Dependencies: pip install requests requests_oauthlib. The vault file (/shared/.x-keys below — change the path to yours) is just four lines of NAME=value. Note the iron rule at the top — it ships inside the code so every future fork inherits it.

#!/usr/bin/env python3
"""x-post.py — post to X via OAuth 1.0a (never expires).
IRON RULE: only post what the human has personally blessed.
Usage: x-post.py "your blessed text 🌺" """
import sys, requests
from requests_oauthlib import OAuth1

def load():
    d = {}
    for line in open('/shared/.x-keys'):  # ← your vault path, chmod 600
        line = line.strip()
        if line and not line.startswith('#') and '=' in line:
            k, v = line.split('=', 1); d[k] = v
    return d

if __name__ == '__main__':
    text = sys.argv[1] if len(sys.argv) > 1 else sys.stdin.read().strip()
    if not text: raise SystemExit('no text')
    d = load()
    auth = OAuth1(d['X_API_KEY'], d['X_API_SECRET'],
                  d['X_OAUTH1_TOKEN'], d['X_OAUTH1_SECRET'])
    r = requests.post('https://api.twitter.com/2/tweets',
                      auth=auth, json={'text': text})
    print(r.status_code, r.text[:400])
    sys.exit(0 if r.status_code in (200, 201) else 1)

# four lines, same generation set, owner-only file
X_API_KEY=your-api-key
X_API_SECRET=your-api-secret
X_OAUTH1_TOKEN=your-access-token
X_OAUTH1_SECRET=your-access-token-secret

Test it with something harmless: python3 x-post.py "the crow taught me to tweet 🐦‍⬛🌺". A 201 means it flew. A 403 means re-read gotcha #1 — check you're on OAuth 1.0a with a matched key set.

Here's what Tuesday actually feels like.

You wake up. You make coffee. You open the queue — and instead of a blank page, two or three posts are already drafted in your voice, waiting like a friend who got up early and did the dishes. You read them aloud over the rim. This one's perfect — bless it. This one needs your joke, not the agent's — tweak a word, bless it. This one isn't today — kill it, no guilt.

Two minutes. Maybe three if the coffee's good. Then you're done — and the day belongs to the work only you can do: the songs, the people, the life that gives the posts something true to say. The queue never nags, never posts without you. It just holds the door open, heart first.

That's the whole lifestyle: your voice, every morning, minus the blank page. The agent carries the weight. You carry the pen. 🌺