Request media.write so media upload tools work without re-auth

Co-authored-by: Cursor <cursoragent@cursor.com>

third_party/x-ads/CHANGELOG.md

@@ -5,6 +5,6 @@ All notable changes to this plugin will be documented here.
 ## 1.0.0 — initial release
 
 - Added the `x-ads` MCP server pointing at `https://ads-api.x.com/mcp`.
-- OAuth user sign-in using X's client ID `NGdZYmo4VVp2T1BnRG55NlExOGQ6MTpjaQ` (the same client the X connector uses), requesting `ads.read`, `ads.write`, and `offline.access`.
+- OAuth user sign-in using X's client ID `NGdZYmo4VVp2T1BnRG55NlExOGQ6MTpjaQ` (the same client the X connector uses), requesting `ads.read`, `ads.write`, `media.write`, and `offline.access`.
 - Separate plugin from X: `ads-api.x.com` is a different protected resource than `api.x.com` with different scopes, so it requires its own authorization.
 - Logo: X's official mark from the X brand toolkit, on a black tile matching X's own app icon.

third_party/x-ads/README.md

@@ -27,6 +27,7 @@ Or run `/add-plugin x-ads` in chat.
         "scopes": [
           "ads.read",
           "ads.write",
+          "media.write",
           "offline.access"
         ]
       }
@@ -54,7 +55,7 @@ Requests run in your user context against the ads accounts your X account can ac
 
 ## Scopes requested
 
-`ads.read`, `ads.write`, `offline.access`
+`ads.read`, `ads.write`, `media.write`, `offline.access`
 
 ## Docs
 

third_party/x-ads/mcp.json

@@ -8,6 +8,7 @@
         "scopes": [
           "ads.read",
           "ads.write",
+          "media.write",
           "offline.access"
         ]
       }