Is Auto X Safe? Who Runs the Telegram Bot, What It Can Do on Your X Account, and How to Disconnect (2026)
Is Auto X safe to connect to your X account?
Auto X is a Telegram bot (@auto_x_schedule_bot) built by GSPTeck, the indie studio of developer giosaia. It connects to X through X's official OAuth 2.0 sign-in, so you never give it your X password. It asks for five permissions: read posts, write posts, read your profile, upload media, and stay signed in. With those it can publish the posts you schedule and nothing more. It can't read your direct messages, follow accounts or like posts, because it never asks for those permissions. You can cut it off at any time from Telegram with /disconnect or from X's own settings.
We make Auto X, so this is a first-party answer. Each claim below is something you can check yourself on the X consent screen, in X's settings, or in the policies linked at the end.
Who runs Auto X?
Auto X is run by GSPTeck, the same small studio behind several Android apps and the developer guides on gspteck.com.
| Question | Answer |
|---|---|
| Product | Auto X, a Telegram bot that schedules and publishes posts to X |
| Bot username | @auto_x_schedule_bot (check the exact spelling before you start a chat) |
| Website | autox.network |
| Maker | GSPTeck (giosaia) |
| Privacy policy | gspteck.com/policy |
| Contact and deletion requests | themaker@gspteck.com or gspteck.com/delete-account |
| Payments | Stripe checkout, started from /subscribe in the bot |
The name causes some confusion. Auto X the Telegram bot has no connection to AutoX, the self-driving car company, or to other apps and token projects that use a similar name. If a site or account asks you to pay, invest or hand over a password "for Auto X", it isn't us.
What Auto X can and can't do on your X account
When you send /connect, the bot sends you to X's own consent page. That page lists what you are approving. These are the five scopes Auto X requests, and what each one is used for.
| Scope on X's consent screen | What it allows | Why Auto X needs it |
|---|---|---|
| tweet.read | Read posts | Required by X, together with users.read, to look up the connected account |
| tweet.write | Publish posts | Post what you scheduled, at the time you picked |
| users.read | Read your profile | Show which X account is connected |
| media.write | Upload images and video | Attach the media you sent in Telegram |
| offline.access | Stay signed in | Publish while you are offline, without asking you to sign in again |
Just as important is what isn't on that list. Auto X has no direct message scopes, no follow or block scopes and no like scopes. It can't change your password, email or profile. If a consent screen claiming to be Auto X asks for more than these five, stop and close it.
How your X connection is stored
X gives the bot an access token and a refresh token, not your password. Auto X encrypts both with AES-256-GCM before storing them and refreshes them automatically, so the connection keeps working without you signing in again. Our write-up on refresh-token rotation and secret storage for Telegram-to-X bots explains how this works and why tokens should never sit in plain text.
The bot keeps what it needs to do the job: your Telegram chat, the connected X account, and the posts and media you queue until they are published. Anything else is covered in the privacy policy, which is shared across GSPTeck's products.
How to disconnect Auto X, step by step
You can end the connection from either side. Doing both is the cleanest option.
- Check what is still queued. Send /queue and use /cancel with a post's ID for anything you no longer want published.
- Disconnect in Telegram. Send /disconnect. The bot revokes its token with X and deletes the stored X account record.
- Confirm on X. On x.com, open Settings and privacy, then Security and account access, then Apps and sessions, then Connected apps. If Auto X is still listed, choose Revoke access.
- Ask for deletion if you want everything gone. Email themaker@gspteck.com or use gspteck.com/delete-account to have your remaining data removed.
Revoking on X only stops future access. It doesn't delete posts that were already published, because those are your posts on X. To remove those, delete them on X the usual way.
Free, Pro and Ultra: what you pay for, and what is free
Auto X has a free plan, so you can try it with no card. The paid plans add features. None of them adds more access to your account.
| Plan | What it includes |
|---|---|
| Free | Text and media scheduling up to 7 days ahead, 10 media posts a month, with occasional ads in bot messages |
| Pro | Recurring loops, extended limits, no ads |
| Ultra | Everything in Pro, plus Grok AI text, image and video generation |
Upgrades start with /subscribe and go through Stripe checkout, so Auto X never sees your card number. Current prices are shown in the bot and on the Auto X homepage. If you'd rather not pay for X's API yourself, our guide to legit ways to auto-post to X without paying for the API compares the options.
Is using a scheduling bot allowed on X?
Yes. X's automation rules allow you to schedule your own posts through an app you authorized. What they ban is spam behavior: automated replies and mentions to people who didn't ask, identical posts across several accounts, and trend or hashtag stuffing. Auto X publishes only what you write and schedule, on your own account. Our summary of what X's automation rules allow and ban covers the details.
Five checks before you connect any X scheduling bot
- It uses X's sign-in page. You should land on x.com to approve access. A bot that asks for your password in chat is a red flag.
- The scopes match the job. A scheduler needs to write posts. It doesn't need your direct messages.
- There is a named maker and a policy. Look for a privacy policy and a real contact address.
- You can leave on your own. There should be a disconnect command, and the app should appear under Connected apps on X.
- Payments go through a known processor. Never pay by crypto transfer or gift card "to activate" a bot.
Auto X passes all five. For a wider comparison, see the best Telegram bots to auto-post to X, compared.
FAQ
Can Auto X read my X direct messages?
No. Auto X requests only tweet.read, tweet.write, users.read, media.write and offline.access. None of them gives access to direct messages.
Does Auto X need my X password?
No. You approve access on X's own OAuth page, and the bot receives a token. Your password stays with X.
How do I remove Auto X from my X account?
Send /disconnect in the bot, which revokes the token and deletes the stored account record. Then check Connected apps under Apps and sessions in X settings, and revoke it there if it is still listed.
Is Auto X the same as the AutoX self-driving company?
No. Auto X is a Telegram bot for scheduling posts on X, made by GSPTeck. It isn't related to the autonomous-driving company or to any token project with a similar name.
Sources
- X developer docs: OAuth 2.0 overview and scopes (checked 2026-10-25)
- X Help Center: connect or revoke access to third-party apps (checked 2026-10-25)
- X Help Center: automation rules (checked 2026-10-25)
- GSPTeck privacy policy (checked 2026-10-25)
- Auto X: features and plans (checked 2026-10-25)