Integration · destination
X Ads (Twitter)
X Pixel and Conversion API with twclid.
How events reach X Ads
Every path ends in the same place: the policy engine checks the consent purpose this destination requires, strips what may not leave, and the worker delivers with the shared event id.
- Browser tag — loaded by the Track snippet after consent; the vendor script never sits in your template and is never loaded without the required purpose.
- Server API — delivered by the worker with retries, health checks, error classification and a redacted payload preview for every attempt.
- Hybrid — browser tag and server request share one event id; the platform deduplicates on conversion_id.
What is sent
Only what you configure in the event mapping, and only after the policy engine has allowed the event for this destination.
- Event name and timestamp, mapped from Track's standard events to the platform's event names.
- The shared event id in the platform's conversion_id field, so browser and server deliveries count once.
- Click ids this platform may receive: twclid. Other vendors' click ids are never forwarded.
- Order id, value, currency and items for purchase-type events.
- SHA-256-hashed identifiers (e-mail, phone, external id) for matching — only with the required consent and only if captured.
- The consent state the event was collected under, where the platform accepts consent signals.
Never sent
- Raw e-mail addresses, phone numbers or names — identifiers are hashed on ingest.
- Inferred values: unknown stays unknown, nothing is guessed.
- Events collected without the purpose this destination requires.
- Secrets: tokens live in the encrypted vault and never reach the browser, the assistant or a log.
Technical facts
- Deduplication field
conversion_id— conversion_id- Click ids
twclid- Consent purpose
- Marketing
- Pinned API version
12- Implementation status
- Implemented · verified against the vendor documentation · verified 2026-09-03
- Vendor documentation
- X Ads API documentation
What you need
Public identifiers can be typed in chat or the wizard; secrets go through the secure credential card or OAuth and are stored encrypted.
Public identifiers
- pixel_id
- X Pixel ID
Credentials
- OAuth connection · X
oauth_access_token— stored in the encrypted vault- OAuth token secret · X
oauth_token_secret— stored in the encrypted vault
Consent
Requires the marketing purpose. Without it nothing is loaded in the browser and nothing is sent from the server. Inferred consent is never exported, and Global Privacy Control opt-outs block delivery.
Setup in a few steps
The assistant runs the detailed checks. You see the milestones that need a decision from you.
Enter identifiers
Add the public IDs from the platform. Formats are validated against the vendor's documentation before anything is saved.
Connect credentials
Paste the token into the secure card or connect the account via OAuth. Secrets go straight into the encrypted vault.
Map and test
Standard events are pre-mapped to the platform's event names. A flagged test event runs through the real pipeline and shows the vendor's answer.
Publish
Review the diff, approve, publish a signed configuration version. Roll back with one click if needed.
From Tracking Knowledge
Guides written by the team that builds this connector.
Deduplication that survives reality: event ids, order ids and what each platform actually keys on
A platform-by-platform table of deduplication keys — Meta, Google Ads, GA4, TikTok, Microsoft, LinkedIn, Pinterest, Snapchat, Reddit, X, CM360 — and the two-key strategy that keeps hybrid tracking honest.
Reference · 4 min read
Click ids and attribution windows: which parameters to capture, how long to keep them and where to store them
A reference of advertising click ids (gclid, gbraid, wbraid, dclid, msclkid, fbclid, ttclid, li_fat_id, rdt_cid, epik, ScCid, twclid, tblci, ob_click_id, affiliate ids), how consent gates their capture, how attribution windows differ per platform and how first-party storage should expire.
Reference · 3 min read
Questions
Can I run server-only?
Yes. Choose server mode in the wizard; the vendor script is never loaded and matching relies on hashed identifiers and click ids captured by the tracker.
How are duplicates avoided?
The browser tag and the server request carry the same event id, and purchases add the order id. The worker also deduplicates repeated source events before delivery.
What if the vendor API changes?
API versions are pinned centrally with the verification date; sunset warnings appear in the destination health long before an endpoint is retired.
Connect X Ads
Set it up with the guided wizard or let the assistant do it in chat.