Yes – xAuth requires explicit permission from Twitter to be able to use. Permission is only granted to applications that have no other means to secure web-based authorization (such as environments where a web browser is completely unavailable). Most modern applications and operating systems provide some means to perform web-based authorization, so it is seldom awarded in the present day.