Action Reference

Every action below is an endpoint:

POST /twin/sessions/{persona}/actions/{platform}/{action}

Send the payload fields as a JSON object. Fields marked ? are optional; an empty payload is {}. See Running Platform Actions for the request and response shape, and Routing for what transport means and when you can override it.

Kind is read or write. Writes consume a write slot and are subject to your account's allowance, daily caps, and cooldowns; reads are not.

Some actions enforce cross-field rules the table cannot show. A row whose fields all read optional may still reject an otherwise reasonable payload, so check the 400 message. Known cases:

LinkedIn

X

Reddit

Instagram

Actions that only run locally

A few verbs are deliberately absent from the API because they cannot run on hosted infrastructure:

Nested verbs need ?engine=cloud while your relay is online

Actions whose command nests a sub-verb - x/dm-*, reddit/chat-*, and linkedin/salesnav-* - are rejected by the local relay's argv check, which requires the second command token to equal the action name.

There is no automatic fallback from that. The API only reroutes to the hosted twin when the relay is lost; a rejection is an error response, so the call fails outright. With an online relay under the default auto policy, these actions therefore require an explicit pin:

POST /twin/sessions/{persona}/actions/x/dm-inbox?engine=cloud

Without the pin they fail while your machine is online and succeed while it is off, which is a confusing failure to debug. A relay carrying the argv fix removes the need for the pin, but only once that build is installed.

These run through the local CLI or the local MCP server instead.

The passcode is set with wonda x dm passcode set, which is terminal-only by design - the secret never leaves your machine, so there is nothing for the API to forward. It is loaded only when X actually presents its encrypted-XChat gate, so an account without that gate can send DMs without one; the writes stay local because the transport is WAB, not because every account needs a passcode. The DM reads (x/dm-inbox, x/dm-read, x/dm-requests) are available over the API like any other read.