X automation rules: what's allowed in 2026
Updated
X allows some automation, like automated posts of useful information and replies to people who opted in. It doesn't allow automated replies based on keyword searches, automated likes, bulk following, unsolicited automated DMs or scripting the X website. AI reply bots need X's prior written approval. You're responsible for what any app does with your account.
This summary comes from X's automation rules, updated April 2026, and its developer guidelines, read on November 3, 2026. It isn't legal advice, and X's own text is what counts.
The rules at a glance
| Action | Automated? | Conditions |
|---|---|---|
| Posts from outside information, like an RSS feed | Allowed | You're authorized to publish it |
| Other posts for information or entertainment | Allowed | Not duplicative or spammy |
| Replies to people who opted in | Allowed | Clear opt-in and opt-out, one reply per interaction |
| Replies based on keyword searches | Not allowed | |
| AI reply bots | Needs approval | Prior written approval from X |
| DMs to people who opted in | Allowed | Clear opt-in and opt-out |
| Unsolicited or bulk DMs | Not allowed | |
| Likes | Not allowed | |
| Hiding replies | Not allowed | |
| Reposts and quotes | Limited | Bulk, aggressive or spammy reposting is a violation |
| Following or unfollowing | Limited | Not in a bulk, aggressive or indiscriminate way |
| Adding people to Lists | Limited | Not in bulk or indiscriminately |
| Posting about trending topics | Not allowed | |
| Scripting the X website | Not allowed | May lead to permanent suspension |
The rules most people miss
A follow isn't consent. X says that someone following you isn't enough to show they want an automated response. It also says being able to receive a DM from you doesn't mean they want automated ones.
"Auto-plug" and similar features depend on setup. Many tools offer them, and X's rules don't name them. The relevant tests are about opt-in, spam and duplicates. Read X's text, and judge what you turn on.
Browser scripts count. X's rules specifically warn against non-API automation, like scripting the website. That covers tools that click for you in your browser. So a Chrome extension that takes actions without you is riskier than one that only helps you write.
OAuth isn't enough. Connecting an app doesn't by itself give it consent to act for you. The app must describe what it'll do, get your express consent and let you opt out.
Automated accounts need a label. X's developer guidelines say automated accounts must enable the "Automated" profile label and state who runs them.
Follower apps are banned. The rules say apps that claim to get users more followers are prohibited.
You're on the hook
X says that as a user, you're "ultimately responsible" for what's done with your account, including by apps. If automated activity breaks the rules, X may filter your posts from search or suspend your account. Its authenticity policy repeats that responsibility.
So "the tool said it was safe" won't protect you. Also, X's rewards program makes content "created or posted using automated means" ineligible. If you're going for payouts, ask about it before you automate.
Is scheduling automation?
Scheduling posts you wrote yourself is a normal use, and X's own composer offers it. See how to schedule posts on X. X's rules focus on spam, duplicates and unsolicited contact. Scheduling the same post over and over would be a problem, since they prohibit duplicative or substantially similar posts.
Is AI writing allowed?
Using AI to help you write a post you then publish by hand isn't something these rules prohibit. They focus on automated actions. Deploying an AI bot to reply automatically requires X's approval. You're still responsible for your content, so check it. Also read how to make AI drafts sound like you and how to choose an AI tweet generator.
Six checks before you connect a tool
- What permissions does it ask for? A tool that only reads can't post for you. A tool that can write can.
- What will it do without you? Look for auto-replies, auto-likes, auto-follows and auto-DMs. Turn off what you don't need.
- Does it use X's API? If it works by driving your browser, that's a warning sign.
- Does it promise followers? X's rules prohibit that kind of app.
- Does it pool engagement? Exchanges and "pods" fall under X's policy.
- Can you revoke it? You can remove an app from your X settings at any time. Check your list every so often.
Our comparison of X growth tools lists what the common ones offer.
Where Repli sits
We should be clear, since we make it. Repli has read-only access to X. It can't post, reply, like or follow, and every post goes out because you pressed Post on X. So none of the automated action rules come into play. You're still responsible for what you post. We built it this way so that you don't have to worry about these rules.
It also means Repli takes more of your time than a tool that posts for you. If you want a scheduler, it's not what you need.
Common questions
Can I get suspended for using a third-party X tool?
It can happen if the tool's activity breaks X's rules. X says it may take action against your account, so check what's switched on.
Are auto-DMs allowed on X?
Only to people who've clearly indicated they want to be contacted, and with an easy way to opt out. Unsolicited bulk DMs aren't allowed.
Can I use a bot to reply to mentions?
You can auto-reply to people who've opted in, for example by replying to your post, within the conditions above. If AI writes the replies, you need X's prior written approval.
Do I need to label my account as automated?
If it's an automated account using the X API, yes, according to X's guidelines. A person who occasionally schedules posts isn't what that section describes.
Next step
Open your X settings, review your connected apps and remove what you don't use. If you want daily help that never acts on your account, try Repli's demo, or our free tools, which need no X login.