[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-openai-twilio-iam-auth-setup":3,"mdc--cgttio-key":36,"related-repo-openai-twilio-iam-auth-setup":1798,"related-org-openai-twilio-iam-auth-setup":1921},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":25,"repoUrl":26,"updatedAt":27,"license":28,"forks":29,"topics":30,"repo":31,"sourceUrl":34,"mdContent":35},"twilio-iam-auth-setup","manage Twilio authentication credentials","Set up and manage Twilio authentication credentials: Auth Tokens, API keys (Standard, Main, Restricted), Access Tokens for client-side SDKs, and credential rotation. Use this skill as a prerequisite foundation before making any Twilio API calls.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"openai","OpenAI","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fopenai.png",[12,16,19,22],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Auth","auth",{"name":20,"slug":21,"type":15},"API Development","api-development",{"name":23,"slug":24,"type":15},"Twilio","twilio",3992,"https:\u002F\u002Fgithub.com\u002Fopenai\u002Fplugins","2026-06-30T19:00:57.102",null,465,[],{"repoUrl":26,"stars":25,"forks":29,"topics":32,"description":33},[],"OpenAI Plugins","https:\u002F\u002Fgithub.com\u002Fopenai\u002Fplugins\u002Ftree\u002FHEAD\u002Fplugins\u002Ftwilio-developer-kit\u002Fskills\u002Ftwilio-iam-auth-setup","---\nname: twilio-iam-auth-setup\ndescription: >\n  Set up and manage Twilio authentication credentials: Auth Tokens, API keys\n  (Standard, Main, Restricted), Access Tokens for client-side SDKs, and\n  credential rotation. Use this skill as a prerequisite foundation before\n  making any Twilio API calls.\n---\n\n## Overview\n\nTwilio supports multiple authentication methods. For most developers: use Auth Token for local prototyping, then move to API Keys in production.\n\n| Method | Use for | Security |\n|--------|---------|----------|\n| Account SID + Auth Token | Local prototyping, initial testing | Full account access — avoid in production |\n| Account SID + API Key (Standard) + Secret | All production code | Recommended — revocable, no access to \u002FAccounts or \u002FKeys |\n| Account SID + API Key (Restricted) + Secret | Fine-grained production access | Best — limit to specific resources only |\n| Account SID + API Key (Main) + Secret | Account management automation | Full access like Auth Token, but revocable |\n\n**For beginners \u002F vibe-coders:** Start with Auth Token to get your first API call working, then create a Standard API Key before deploying anything. The key difference: if an API Key leaks, you revoke just that key. If your Auth Token leaks, your entire account is exposed until you rotate it.\n\n---\n\n## Prerequisites\n\n- Twilio account — see `twilio-account-setup` if you don't have one\n- Access to the [Twilio Console](https:\u002F\u002Fconsole.twilio.com)\n\n---\n\n## Quickstart\n\nFind your Account SID and Auth Token in the Console dashboard.\n\n**Python**\n```python\nimport os\nfrom twilio.rest import Client\n\nclient = Client(os.environ[\"TWILIO_ACCOUNT_SID\"], os.environ[\"TWILIO_AUTH_TOKEN\"])\n```\n\n**Node.js**\n```node\nconst client = require(\"twilio\")(\n    process.env.TWILIO_ACCOUNT_SID,\n    process.env.TWILIO_AUTH_TOKEN\n);\n```\n\n**Never commit Auth Token to version control or use in production.**\n\n---\n\n## Key Patterns\n\n### API Keys (production)\n\n**Create:** Console > Account > API keys & tokens > Create API key\n\n| Key type | Access | Use case |\n|----------|--------|----------|\n| **Standard** | All resources except \u002FAccounts and \u002FKeys endpoints | Default for production apps |\n| **Restricted** | Only the specific resources you grant | Multi-tenant apps, microservices, least-privilege |\n| **Main** | Full account access (like Auth Token) | Account management automation (Console-only creation) |\n\nAfter creation, copy the **API Key SID** (`SK...`) and **Secret** — the secret is shown only once.\n\n**Python**\n```python\nclient = Client(\n    os.environ[\"TWILIO_API_KEY\"],      # SK...\n    os.environ[\"TWILIO_API_SECRET\"],\n    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n)\n```\n\n**Node.js**\n```node\nconst client = require(\"twilio\")(\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n);\n```\n\n### Restricted API Keys\n\nRestricted keys grant access only to specific Twilio API resources you define. Use them for least-privilege access in production.\n\n**Create via the v1 IAM API** (not the v2010 \u002FKeys.json endpoint — see CANNOT section):\n\n**Python**\n```python\nkey = client.iam.v1.api_key.create(\n    account_sid=os.environ[\"TWILIO_ACCOUNT_SID\"],\n    friendly_name=\"messaging-only-key\",\n    key_type=\"restricted\",\n    policy={\n        \"allow\": [\n            \"\u002F2010-04-01\u002FAccounts\u002F{AccountSid}\u002FMessages*\"\n        ]\n    }\n)\n# Store key.sid and key.secret securely — secret shown only once\n```\n\n**Example permission patterns:**\n| Permission | Grants access to |\n|-----------|-----------------|\n| `\u002F2010-04-01\u002FAccounts\u002F{AccountSid}\u002FMessages*` | Send and read messages |\n| `\u002F2010-04-01\u002FAccounts\u002F{AccountSid}\u002FCalls*` | Make and manage calls |\n| `\u002Fv2\u002FServices\u002F*\u002FVerifications*` | Verify API only |\n\n**Docs:** [Restricted API keys](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fapi-keys\u002Frestricted-api-keys)\n\n### Test Credentials\n\nMake API calls without charges or sending real messages. Find at Console > Account > API keys & tokens > Test credentials.\n\n**Python**\n```python\nclient = Client(\n    os.environ[\"TWILIO_TEST_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_TEST_AUTH_TOKEN\"]\n)\n```\n\n**Node.js**\n```node\nconst client = require(\"twilio\")(\n    process.env.TWILIO_TEST_ACCOUNT_SID,\n    process.env.TWILIO_TEST_AUTH_TOKEN\n);\n```\n\nMagic test numbers:\n- `+15005550006` — valid, can receive messages\n- `+15005550001` — invalid number (triggers error 21211)\n- `+15005550007` — number that cannot receive SMS (triggers error 21612)\n\n### Auth Token Rotation\n\nRotate your Auth Token if it's been exposed or as periodic security hygiene. Twilio uses a **secondary token promotion** model:\n\n1. Console > Account > API keys & tokens > Request a secondary Auth Token\n2. Update your application to use the secondary token\n3. Once confirmed working, promote the secondary to primary\n4. The old primary token is immediately invalidated\n\n**Python**\n```python\n# Promote secondary Auth Token to primary via API\nfrom twilio.rest import Client\n\nclient = Client(os.environ[\"TWILIO_ACCOUNT_SID\"], os.environ[\"TWILIO_AUTH_TOKEN\"])\naccount = client.api.accounts(os.environ[\"TWILIO_ACCOUNT_SID\"]).update(\n    auth_token_promotion=\"promote\"\n)\n```\n\n**Important:** Auth Token rotation invalidates all active sessions using that token. Plan the switchover to minimize downtime.\n\n**API Keys cannot be rotated** — if an API Key is compromised, delete it and create a new one:\n- Console > Account > API keys & tokens > select key > Delete\n- Or via API: `client.keys(key_sid).delete()`\n\n**Docs:** [Auth Token REST API](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fapi\u002Fauthtoken)\n\n### Access Tokens (client-side SDKs)\n\nShort-lived JWTs for authenticating browser\u002Fmobile clients (Voice JS SDK, Conversations SDK, Video SDK). Generate server-side and pass to the client.\n\n**Python**\n```python\nfrom twilio.jwt.access_token import AccessToken\nfrom twilio.jwt.access_token.grants import VoiceGrant\n\ntoken = AccessToken(\n    os.environ[\"TWILIO_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_API_KEY\"],\n    os.environ[\"TWILIO_API_SECRET\"],\n    identity=\"user-123\",\n    ttl=3600\n)\ntoken.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\nprint(token.to_jwt())\n```\n\n**Node.js**\n```node\nconst { AccessToken } = require(\"twilio\").jwt;\nconst { VoiceGrant } = AccessToken;\n\nconst token = new AccessToken(\n    process.env.TWILIO_ACCOUNT_SID,\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { identity: \"user-123\", ttl: 3600 }\n);\ntoken.addGrant(new VoiceGrant({ outgoingApplicationSid: \"APxxxx\" }));\nconsole.log(token.toJwt());\n```\n\nAvailable grant types: `VoiceGrant`, `VideoGrant`, `ChatGrant` (Conversations), `SyncGrant`\n\n### Environment Variable Reference\n\n```bash\nTWILIO_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n\n# Option 1: Auth Token (testing only)\nTWILIO_AUTH_TOKEN=your_auth_token\n\n# Option 2: API Key (production)\nTWILIO_API_KEY=SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\nTWILIO_API_SECRET=your_api_secret\n\n# Test credentials\nTWILIO_TEST_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\nTWILIO_TEST_AUTH_TOKEN=your_test_auth_token\n```\n\n---\n\n## CANNOT\n\n- **Standard keys cannot access \u002FAccounts or \u002FKeys endpoints** — Returns error 20003 (401). Must use Auth Token or Main API Key for account management.\n- **No restricted key creation via v2010 API** — The v2010 `\u002FKeys.json` endpoint silently ignores `KeyType=restricted` and `Policy` parameters, creating a standard key instead. Use the v1 IAM API.\n- **Restricted keys cannot generate Access Tokens** — Only Standard and Main keys can create client SDK tokens.\n- **No individual Access Token revocation** — Tokens are valid until expiration (max 24h). To revoke early, delete the API key that issued them.\n- **Subaccount credentials cannot access parent or sibling resources** — Each subaccount has its own Auth Token and API Keys. Use the subaccount's own credentials to access its resources — never the parent account's credentials.\n- **API Keys cannot be rotated** — No key rotation API exists. To replace a compromised key: create a new key, update your app, then delete the old key.\n- **PKCV is an advanced feature for compliance-heavy industries** — Public Key Client Validation adds client-certificate-style auth. Incompatible with Flex, Studio, and TaskRouter. Once enforcement is enabled, Auth Token authentication is disabled (one-way door). See [PKCV docs](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fpkcv) — consider this only if your security team requires mutual TLS-equivalent authentication.\n- **Test credentials work with only 4 endpoints** — Messages, Calls, IncomingPhoneNumbers, and Lookups. All other endpoints return 403.\n- **API Key Secret shown only at creation** — Cannot be retrieved afterward. If lost, create a new key.\n- **FriendlyName max 64 characters for keys** — 65+ characters returns error 70001.\n- **Restricted keys limited to 100 permissions per key** — Exceeding this limit is rejected at creation.\n- **Cannot create Main API Keys via REST API** — Console only\n- **Cannot set Access Token TTL beyond 24 hours** — Maximum lifetime is 24h\n- **Cannot use test credentials with real numbers** — Test credentials only work with test magic numbers\n\n---\n\n## Next Steps\n\n- **Account setup and phone numbers:** `twilio-account-setup`\n- **Security best practices (credential management, key rotation):** `twilio-security-hardening`\n- **Restricted API keys (fine-grained permissions):** [Docs](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fapi-keys\u002Frestricted-api-keys)\n- **Auth Token rotation:** [REST API](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fapi\u002Fauthtoken)\n",{"data":37,"body":38},{"name":4,"description":6},{"type":39,"children":40},"root",[41,50,56,160,171,175,181,214,217,223,228,236,286,294,335,343,346,352,359,369,459,486,493,541,548,593,599,604,614,621,721,729,802,819,825,830,837,874,881,918,923,959,965,977,1001,1008,1067,1077,1087,1106,1121,1127,1132,1139,1240,1247,1337,1371,1377,1537,1540,1546,1721,1724,1730,1792],{"type":42,"tag":43,"props":44,"children":46},"element","h2",{"id":45},"overview",[47],{"type":48,"value":49},"text","Overview",{"type":42,"tag":51,"props":52,"children":53},"p",{},[54],{"type":48,"value":55},"Twilio supports multiple authentication methods. For most developers: use Auth Token for local prototyping, then move to API Keys in production.",{"type":42,"tag":57,"props":58,"children":59},"table",{},[60,83],{"type":42,"tag":61,"props":62,"children":63},"thead",{},[64],{"type":42,"tag":65,"props":66,"children":67},"tr",{},[68,74,79],{"type":42,"tag":69,"props":70,"children":71},"th",{},[72],{"type":48,"value":73},"Method",{"type":42,"tag":69,"props":75,"children":76},{},[77],{"type":48,"value":78},"Use for",{"type":42,"tag":69,"props":80,"children":81},{},[82],{"type":48,"value":13},{"type":42,"tag":84,"props":85,"children":86},"tbody",{},[87,106,124,142],{"type":42,"tag":65,"props":88,"children":89},{},[90,96,101],{"type":42,"tag":91,"props":92,"children":93},"td",{},[94],{"type":48,"value":95},"Account SID + Auth Token",{"type":42,"tag":91,"props":97,"children":98},{},[99],{"type":48,"value":100},"Local prototyping, initial testing",{"type":42,"tag":91,"props":102,"children":103},{},[104],{"type":48,"value":105},"Full account access — avoid in production",{"type":42,"tag":65,"props":107,"children":108},{},[109,114,119],{"type":42,"tag":91,"props":110,"children":111},{},[112],{"type":48,"value":113},"Account SID + API Key (Standard) + Secret",{"type":42,"tag":91,"props":115,"children":116},{},[117],{"type":48,"value":118},"All production code",{"type":42,"tag":91,"props":120,"children":121},{},[122],{"type":48,"value":123},"Recommended — revocable, no access to \u002FAccounts or \u002FKeys",{"type":42,"tag":65,"props":125,"children":126},{},[127,132,137],{"type":42,"tag":91,"props":128,"children":129},{},[130],{"type":48,"value":131},"Account SID + API Key (Restricted) + Secret",{"type":42,"tag":91,"props":133,"children":134},{},[135],{"type":48,"value":136},"Fine-grained production access",{"type":42,"tag":91,"props":138,"children":139},{},[140],{"type":48,"value":141},"Best — limit to specific resources only",{"type":42,"tag":65,"props":143,"children":144},{},[145,150,155],{"type":42,"tag":91,"props":146,"children":147},{},[148],{"type":48,"value":149},"Account SID + API Key (Main) + Secret",{"type":42,"tag":91,"props":151,"children":152},{},[153],{"type":48,"value":154},"Account management automation",{"type":42,"tag":91,"props":156,"children":157},{},[158],{"type":48,"value":159},"Full access like Auth Token, but revocable",{"type":42,"tag":51,"props":161,"children":162},{},[163,169],{"type":42,"tag":164,"props":165,"children":166},"strong",{},[167],{"type":48,"value":168},"For beginners \u002F vibe-coders:",{"type":48,"value":170}," Start with Auth Token to get your first API call working, then create a Standard API Key before deploying anything. The key difference: if an API Key leaks, you revoke just that key. If your Auth Token leaks, your entire account is exposed until you rotate it.",{"type":42,"tag":172,"props":173,"children":174},"hr",{},[],{"type":42,"tag":43,"props":176,"children":178},{"id":177},"prerequisites",[179],{"type":48,"value":180},"Prerequisites",{"type":42,"tag":182,"props":183,"children":184},"ul",{},[185,200],{"type":42,"tag":186,"props":187,"children":188},"li",{},[189,191,198],{"type":48,"value":190},"Twilio account — see ",{"type":42,"tag":192,"props":193,"children":195},"code",{"className":194},[],[196],{"type":48,"value":197},"twilio-account-setup",{"type":48,"value":199}," if you don't have one",{"type":42,"tag":186,"props":201,"children":202},{},[203,205],{"type":48,"value":204},"Access to the ",{"type":42,"tag":206,"props":207,"children":211},"a",{"href":208,"rel":209},"https:\u002F\u002Fconsole.twilio.com",[210],"nofollow",[212],{"type":48,"value":213},"Twilio Console",{"type":42,"tag":172,"props":215,"children":216},{},[],{"type":42,"tag":43,"props":218,"children":220},{"id":219},"quickstart",[221],{"type":48,"value":222},"Quickstart",{"type":42,"tag":51,"props":224,"children":225},{},[226],{"type":48,"value":227},"Find your Account SID and Auth Token in the Console dashboard.",{"type":42,"tag":51,"props":229,"children":230},{},[231],{"type":42,"tag":164,"props":232,"children":233},{},[234],{"type":48,"value":235},"Python",{"type":42,"tag":237,"props":238,"children":243},"pre",{"className":239,"code":240,"language":241,"meta":242,"style":242},"language-python shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import os\nfrom twilio.rest import Client\n\nclient = Client(os.environ[\"TWILIO_ACCOUNT_SID\"], os.environ[\"TWILIO_AUTH_TOKEN\"])\n","python","",[244],{"type":42,"tag":192,"props":245,"children":246},{"__ignoreMap":242},[247,258,267,277],{"type":42,"tag":248,"props":249,"children":252},"span",{"class":250,"line":251},"line",1,[253],{"type":42,"tag":248,"props":254,"children":255},{},[256],{"type":48,"value":257},"import os\n",{"type":42,"tag":248,"props":259,"children":261},{"class":250,"line":260},2,[262],{"type":42,"tag":248,"props":263,"children":264},{},[265],{"type":48,"value":266},"from twilio.rest import Client\n",{"type":42,"tag":248,"props":268,"children":270},{"class":250,"line":269},3,[271],{"type":42,"tag":248,"props":272,"children":274},{"emptyLinePlaceholder":273},true,[275],{"type":48,"value":276},"\n",{"type":42,"tag":248,"props":278,"children":280},{"class":250,"line":279},4,[281],{"type":42,"tag":248,"props":282,"children":283},{},[284],{"type":48,"value":285},"client = Client(os.environ[\"TWILIO_ACCOUNT_SID\"], os.environ[\"TWILIO_AUTH_TOKEN\"])\n",{"type":42,"tag":51,"props":287,"children":288},{},[289],{"type":42,"tag":164,"props":290,"children":291},{},[292],{"type":48,"value":293},"Node.js",{"type":42,"tag":237,"props":295,"children":299},{"className":296,"code":297,"language":298,"meta":242,"style":242},"language-node shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","const client = require(\"twilio\")(\n    process.env.TWILIO_ACCOUNT_SID,\n    process.env.TWILIO_AUTH_TOKEN\n);\n","node",[300],{"type":42,"tag":192,"props":301,"children":302},{"__ignoreMap":242},[303,311,319,327],{"type":42,"tag":248,"props":304,"children":305},{"class":250,"line":251},[306],{"type":42,"tag":248,"props":307,"children":308},{},[309],{"type":48,"value":310},"const client = require(\"twilio\")(\n",{"type":42,"tag":248,"props":312,"children":313},{"class":250,"line":260},[314],{"type":42,"tag":248,"props":315,"children":316},{},[317],{"type":48,"value":318},"    process.env.TWILIO_ACCOUNT_SID,\n",{"type":42,"tag":248,"props":320,"children":321},{"class":250,"line":269},[322],{"type":42,"tag":248,"props":323,"children":324},{},[325],{"type":48,"value":326},"    process.env.TWILIO_AUTH_TOKEN\n",{"type":42,"tag":248,"props":328,"children":329},{"class":250,"line":279},[330],{"type":42,"tag":248,"props":331,"children":332},{},[333],{"type":48,"value":334},");\n",{"type":42,"tag":51,"props":336,"children":337},{},[338],{"type":42,"tag":164,"props":339,"children":340},{},[341],{"type":48,"value":342},"Never commit Auth Token to version control or use in production.",{"type":42,"tag":172,"props":344,"children":345},{},[],{"type":42,"tag":43,"props":347,"children":349},{"id":348},"key-patterns",[350],{"type":48,"value":351},"Key Patterns",{"type":42,"tag":353,"props":354,"children":356},"h3",{"id":355},"api-keys-production",[357],{"type":48,"value":358},"API Keys (production)",{"type":42,"tag":51,"props":360,"children":361},{},[362,367],{"type":42,"tag":164,"props":363,"children":364},{},[365],{"type":48,"value":366},"Create:",{"type":48,"value":368}," Console > Account > API keys & tokens > Create API key",{"type":42,"tag":57,"props":370,"children":371},{},[372,393],{"type":42,"tag":61,"props":373,"children":374},{},[375],{"type":42,"tag":65,"props":376,"children":377},{},[378,383,388],{"type":42,"tag":69,"props":379,"children":380},{},[381],{"type":48,"value":382},"Key type",{"type":42,"tag":69,"props":384,"children":385},{},[386],{"type":48,"value":387},"Access",{"type":42,"tag":69,"props":389,"children":390},{},[391],{"type":48,"value":392},"Use case",{"type":42,"tag":84,"props":394,"children":395},{},[396,417,438],{"type":42,"tag":65,"props":397,"children":398},{},[399,407,412],{"type":42,"tag":91,"props":400,"children":401},{},[402],{"type":42,"tag":164,"props":403,"children":404},{},[405],{"type":48,"value":406},"Standard",{"type":42,"tag":91,"props":408,"children":409},{},[410],{"type":48,"value":411},"All resources except \u002FAccounts and \u002FKeys endpoints",{"type":42,"tag":91,"props":413,"children":414},{},[415],{"type":48,"value":416},"Default for production apps",{"type":42,"tag":65,"props":418,"children":419},{},[420,428,433],{"type":42,"tag":91,"props":421,"children":422},{},[423],{"type":42,"tag":164,"props":424,"children":425},{},[426],{"type":48,"value":427},"Restricted",{"type":42,"tag":91,"props":429,"children":430},{},[431],{"type":48,"value":432},"Only the specific resources you grant",{"type":42,"tag":91,"props":434,"children":435},{},[436],{"type":48,"value":437},"Multi-tenant apps, microservices, least-privilege",{"type":42,"tag":65,"props":439,"children":440},{},[441,449,454],{"type":42,"tag":91,"props":442,"children":443},{},[444],{"type":42,"tag":164,"props":445,"children":446},{},[447],{"type":48,"value":448},"Main",{"type":42,"tag":91,"props":450,"children":451},{},[452],{"type":48,"value":453},"Full account access (like Auth Token)",{"type":42,"tag":91,"props":455,"children":456},{},[457],{"type":48,"value":458},"Account management automation (Console-only creation)",{"type":42,"tag":51,"props":460,"children":461},{},[462,464,469,471,477,479,484],{"type":48,"value":463},"After creation, copy the ",{"type":42,"tag":164,"props":465,"children":466},{},[467],{"type":48,"value":468},"API Key SID",{"type":48,"value":470}," (",{"type":42,"tag":192,"props":472,"children":474},{"className":473},[],[475],{"type":48,"value":476},"SK...",{"type":48,"value":478},") and ",{"type":42,"tag":164,"props":480,"children":481},{},[482],{"type":48,"value":483},"Secret",{"type":48,"value":485}," — the secret is shown only once.",{"type":42,"tag":51,"props":487,"children":488},{},[489],{"type":42,"tag":164,"props":490,"children":491},{},[492],{"type":48,"value":235},{"type":42,"tag":237,"props":494,"children":496},{"className":239,"code":495,"language":241,"meta":242,"style":242},"client = Client(\n    os.environ[\"TWILIO_API_KEY\"],      # SK...\n    os.environ[\"TWILIO_API_SECRET\"],\n    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n)\n",[497],{"type":42,"tag":192,"props":498,"children":499},{"__ignoreMap":242},[500,508,516,524,532],{"type":42,"tag":248,"props":501,"children":502},{"class":250,"line":251},[503],{"type":42,"tag":248,"props":504,"children":505},{},[506],{"type":48,"value":507},"client = Client(\n",{"type":42,"tag":248,"props":509,"children":510},{"class":250,"line":260},[511],{"type":42,"tag":248,"props":512,"children":513},{},[514],{"type":48,"value":515},"    os.environ[\"TWILIO_API_KEY\"],      # SK...\n",{"type":42,"tag":248,"props":517,"children":518},{"class":250,"line":269},[519],{"type":42,"tag":248,"props":520,"children":521},{},[522],{"type":48,"value":523},"    os.environ[\"TWILIO_API_SECRET\"],\n",{"type":42,"tag":248,"props":525,"children":526},{"class":250,"line":279},[527],{"type":42,"tag":248,"props":528,"children":529},{},[530],{"type":48,"value":531},"    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n",{"type":42,"tag":248,"props":533,"children":535},{"class":250,"line":534},5,[536],{"type":42,"tag":248,"props":537,"children":538},{},[539],{"type":48,"value":540},")\n",{"type":42,"tag":51,"props":542,"children":543},{},[544],{"type":42,"tag":164,"props":545,"children":546},{},[547],{"type":48,"value":293},{"type":42,"tag":237,"props":549,"children":551},{"className":296,"code":550,"language":298,"meta":242,"style":242},"const client = require(\"twilio\")(\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n);\n",[552],{"type":42,"tag":192,"props":553,"children":554},{"__ignoreMap":242},[555,562,570,578,586],{"type":42,"tag":248,"props":556,"children":557},{"class":250,"line":251},[558],{"type":42,"tag":248,"props":559,"children":560},{},[561],{"type":48,"value":310},{"type":42,"tag":248,"props":563,"children":564},{"class":250,"line":260},[565],{"type":42,"tag":248,"props":566,"children":567},{},[568],{"type":48,"value":569},"    process.env.TWILIO_API_KEY,\n",{"type":42,"tag":248,"props":571,"children":572},{"class":250,"line":269},[573],{"type":42,"tag":248,"props":574,"children":575},{},[576],{"type":48,"value":577},"    process.env.TWILIO_API_SECRET,\n",{"type":42,"tag":248,"props":579,"children":580},{"class":250,"line":279},[581],{"type":42,"tag":248,"props":582,"children":583},{},[584],{"type":48,"value":585},"    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n",{"type":42,"tag":248,"props":587,"children":588},{"class":250,"line":534},[589],{"type":42,"tag":248,"props":590,"children":591},{},[592],{"type":48,"value":334},{"type":42,"tag":353,"props":594,"children":596},{"id":595},"restricted-api-keys",[597],{"type":48,"value":598},"Restricted API Keys",{"type":42,"tag":51,"props":600,"children":601},{},[602],{"type":48,"value":603},"Restricted keys grant access only to specific Twilio API resources you define. Use them for least-privilege access in production.",{"type":42,"tag":51,"props":605,"children":606},{},[607,612],{"type":42,"tag":164,"props":608,"children":609},{},[610],{"type":48,"value":611},"Create via the v1 IAM API",{"type":48,"value":613}," (not the v2010 \u002FKeys.json endpoint — see CANNOT section):",{"type":42,"tag":51,"props":615,"children":616},{},[617],{"type":42,"tag":164,"props":618,"children":619},{},[620],{"type":48,"value":235},{"type":42,"tag":237,"props":622,"children":624},{"className":239,"code":623,"language":241,"meta":242,"style":242},"key = client.iam.v1.api_key.create(\n    account_sid=os.environ[\"TWILIO_ACCOUNT_SID\"],\n    friendly_name=\"messaging-only-key\",\n    key_type=\"restricted\",\n    policy={\n        \"allow\": [\n            \"\u002F2010-04-01\u002FAccounts\u002F{AccountSid}\u002FMessages*\"\n        ]\n    }\n)\n# Store key.sid and key.secret securely — secret shown only once\n",[625],{"type":42,"tag":192,"props":626,"children":627},{"__ignoreMap":242},[628,636,644,652,660,668,677,686,695,704,712],{"type":42,"tag":248,"props":629,"children":630},{"class":250,"line":251},[631],{"type":42,"tag":248,"props":632,"children":633},{},[634],{"type":48,"value":635},"key = client.iam.v1.api_key.create(\n",{"type":42,"tag":248,"props":637,"children":638},{"class":250,"line":260},[639],{"type":42,"tag":248,"props":640,"children":641},{},[642],{"type":48,"value":643},"    account_sid=os.environ[\"TWILIO_ACCOUNT_SID\"],\n",{"type":42,"tag":248,"props":645,"children":646},{"class":250,"line":269},[647],{"type":42,"tag":248,"props":648,"children":649},{},[650],{"type":48,"value":651},"    friendly_name=\"messaging-only-key\",\n",{"type":42,"tag":248,"props":653,"children":654},{"class":250,"line":279},[655],{"type":42,"tag":248,"props":656,"children":657},{},[658],{"type":48,"value":659},"    key_type=\"restricted\",\n",{"type":42,"tag":248,"props":661,"children":662},{"class":250,"line":534},[663],{"type":42,"tag":248,"props":664,"children":665},{},[666],{"type":48,"value":667},"    policy={\n",{"type":42,"tag":248,"props":669,"children":671},{"class":250,"line":670},6,[672],{"type":42,"tag":248,"props":673,"children":674},{},[675],{"type":48,"value":676},"        \"allow\": [\n",{"type":42,"tag":248,"props":678,"children":680},{"class":250,"line":679},7,[681],{"type":42,"tag":248,"props":682,"children":683},{},[684],{"type":48,"value":685},"            \"\u002F2010-04-01\u002FAccounts\u002F{AccountSid}\u002FMessages*\"\n",{"type":42,"tag":248,"props":687,"children":689},{"class":250,"line":688},8,[690],{"type":42,"tag":248,"props":691,"children":692},{},[693],{"type":48,"value":694},"        ]\n",{"type":42,"tag":248,"props":696,"children":698},{"class":250,"line":697},9,[699],{"type":42,"tag":248,"props":700,"children":701},{},[702],{"type":48,"value":703},"    }\n",{"type":42,"tag":248,"props":705,"children":707},{"class":250,"line":706},10,[708],{"type":42,"tag":248,"props":709,"children":710},{},[711],{"type":48,"value":540},{"type":42,"tag":248,"props":713,"children":715},{"class":250,"line":714},11,[716],{"type":42,"tag":248,"props":717,"children":718},{},[719],{"type":48,"value":720},"# Store key.sid and key.secret securely — secret shown only once\n",{"type":42,"tag":51,"props":722,"children":723},{},[724],{"type":42,"tag":164,"props":725,"children":726},{},[727],{"type":48,"value":728},"Example permission patterns:",{"type":42,"tag":57,"props":730,"children":731},{},[732,748],{"type":42,"tag":61,"props":733,"children":734},{},[735],{"type":42,"tag":65,"props":736,"children":737},{},[738,743],{"type":42,"tag":69,"props":739,"children":740},{},[741],{"type":48,"value":742},"Permission",{"type":42,"tag":69,"props":744,"children":745},{},[746],{"type":48,"value":747},"Grants access to",{"type":42,"tag":84,"props":749,"children":750},{},[751,768,785],{"type":42,"tag":65,"props":752,"children":753},{},[754,763],{"type":42,"tag":91,"props":755,"children":756},{},[757],{"type":42,"tag":192,"props":758,"children":760},{"className":759},[],[761],{"type":48,"value":762},"\u002F2010-04-01\u002FAccounts\u002F{AccountSid}\u002FMessages*",{"type":42,"tag":91,"props":764,"children":765},{},[766],{"type":48,"value":767},"Send and read messages",{"type":42,"tag":65,"props":769,"children":770},{},[771,780],{"type":42,"tag":91,"props":772,"children":773},{},[774],{"type":42,"tag":192,"props":775,"children":777},{"className":776},[],[778],{"type":48,"value":779},"\u002F2010-04-01\u002FAccounts\u002F{AccountSid}\u002FCalls*",{"type":42,"tag":91,"props":781,"children":782},{},[783],{"type":48,"value":784},"Make and manage calls",{"type":42,"tag":65,"props":786,"children":787},{},[788,797],{"type":42,"tag":91,"props":789,"children":790},{},[791],{"type":42,"tag":192,"props":792,"children":794},{"className":793},[],[795],{"type":48,"value":796},"\u002Fv2\u002FServices\u002F*\u002FVerifications*",{"type":42,"tag":91,"props":798,"children":799},{},[800],{"type":48,"value":801},"Verify API only",{"type":42,"tag":51,"props":803,"children":804},{},[805,810,812],{"type":42,"tag":164,"props":806,"children":807},{},[808],{"type":48,"value":809},"Docs:",{"type":48,"value":811}," ",{"type":42,"tag":206,"props":813,"children":816},{"href":814,"rel":815},"https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fapi-keys\u002Frestricted-api-keys",[210],[817],{"type":48,"value":818},"Restricted API keys",{"type":42,"tag":353,"props":820,"children":822},{"id":821},"test-credentials",[823],{"type":48,"value":824},"Test Credentials",{"type":42,"tag":51,"props":826,"children":827},{},[828],{"type":48,"value":829},"Make API calls without charges or sending real messages. Find at Console > Account > API keys & tokens > Test credentials.",{"type":42,"tag":51,"props":831,"children":832},{},[833],{"type":42,"tag":164,"props":834,"children":835},{},[836],{"type":48,"value":235},{"type":42,"tag":237,"props":838,"children":840},{"className":239,"code":839,"language":241,"meta":242,"style":242},"client = Client(\n    os.environ[\"TWILIO_TEST_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_TEST_AUTH_TOKEN\"]\n)\n",[841],{"type":42,"tag":192,"props":842,"children":843},{"__ignoreMap":242},[844,851,859,867],{"type":42,"tag":248,"props":845,"children":846},{"class":250,"line":251},[847],{"type":42,"tag":248,"props":848,"children":849},{},[850],{"type":48,"value":507},{"type":42,"tag":248,"props":852,"children":853},{"class":250,"line":260},[854],{"type":42,"tag":248,"props":855,"children":856},{},[857],{"type":48,"value":858},"    os.environ[\"TWILIO_TEST_ACCOUNT_SID\"],\n",{"type":42,"tag":248,"props":860,"children":861},{"class":250,"line":269},[862],{"type":42,"tag":248,"props":863,"children":864},{},[865],{"type":48,"value":866},"    os.environ[\"TWILIO_TEST_AUTH_TOKEN\"]\n",{"type":42,"tag":248,"props":868,"children":869},{"class":250,"line":279},[870],{"type":42,"tag":248,"props":871,"children":872},{},[873],{"type":48,"value":540},{"type":42,"tag":51,"props":875,"children":876},{},[877],{"type":42,"tag":164,"props":878,"children":879},{},[880],{"type":48,"value":293},{"type":42,"tag":237,"props":882,"children":884},{"className":296,"code":883,"language":298,"meta":242,"style":242},"const client = require(\"twilio\")(\n    process.env.TWILIO_TEST_ACCOUNT_SID,\n    process.env.TWILIO_TEST_AUTH_TOKEN\n);\n",[885],{"type":42,"tag":192,"props":886,"children":887},{"__ignoreMap":242},[888,895,903,911],{"type":42,"tag":248,"props":889,"children":890},{"class":250,"line":251},[891],{"type":42,"tag":248,"props":892,"children":893},{},[894],{"type":48,"value":310},{"type":42,"tag":248,"props":896,"children":897},{"class":250,"line":260},[898],{"type":42,"tag":248,"props":899,"children":900},{},[901],{"type":48,"value":902},"    process.env.TWILIO_TEST_ACCOUNT_SID,\n",{"type":42,"tag":248,"props":904,"children":905},{"class":250,"line":269},[906],{"type":42,"tag":248,"props":907,"children":908},{},[909],{"type":48,"value":910},"    process.env.TWILIO_TEST_AUTH_TOKEN\n",{"type":42,"tag":248,"props":912,"children":913},{"class":250,"line":279},[914],{"type":42,"tag":248,"props":915,"children":916},{},[917],{"type":48,"value":334},{"type":42,"tag":51,"props":919,"children":920},{},[921],{"type":48,"value":922},"Magic test numbers:",{"type":42,"tag":182,"props":924,"children":925},{},[926,937,948],{"type":42,"tag":186,"props":927,"children":928},{},[929,935],{"type":42,"tag":192,"props":930,"children":932},{"className":931},[],[933],{"type":48,"value":934},"+15005550006",{"type":48,"value":936}," — valid, can receive messages",{"type":42,"tag":186,"props":938,"children":939},{},[940,946],{"type":42,"tag":192,"props":941,"children":943},{"className":942},[],[944],{"type":48,"value":945},"+15005550001",{"type":48,"value":947}," — invalid number (triggers error 21211)",{"type":42,"tag":186,"props":949,"children":950},{},[951,957],{"type":42,"tag":192,"props":952,"children":954},{"className":953},[],[955],{"type":48,"value":956},"+15005550007",{"type":48,"value":958}," — number that cannot receive SMS (triggers error 21612)",{"type":42,"tag":353,"props":960,"children":962},{"id":961},"auth-token-rotation",[963],{"type":48,"value":964},"Auth Token Rotation",{"type":42,"tag":51,"props":966,"children":967},{},[968,970,975],{"type":48,"value":969},"Rotate your Auth Token if it's been exposed or as periodic security hygiene. Twilio uses a ",{"type":42,"tag":164,"props":971,"children":972},{},[973],{"type":48,"value":974},"secondary token promotion",{"type":48,"value":976}," model:",{"type":42,"tag":978,"props":979,"children":980},"ol",{},[981,986,991,996],{"type":42,"tag":186,"props":982,"children":983},{},[984],{"type":48,"value":985},"Console > Account > API keys & tokens > Request a secondary Auth Token",{"type":42,"tag":186,"props":987,"children":988},{},[989],{"type":48,"value":990},"Update your application to use the secondary token",{"type":42,"tag":186,"props":992,"children":993},{},[994],{"type":48,"value":995},"Once confirmed working, promote the secondary to primary",{"type":42,"tag":186,"props":997,"children":998},{},[999],{"type":48,"value":1000},"The old primary token is immediately invalidated",{"type":42,"tag":51,"props":1002,"children":1003},{},[1004],{"type":42,"tag":164,"props":1005,"children":1006},{},[1007],{"type":48,"value":235},{"type":42,"tag":237,"props":1009,"children":1011},{"className":239,"code":1010,"language":241,"meta":242,"style":242},"# Promote secondary Auth Token to primary via API\nfrom twilio.rest import Client\n\nclient = Client(os.environ[\"TWILIO_ACCOUNT_SID\"], os.environ[\"TWILIO_AUTH_TOKEN\"])\naccount = client.api.accounts(os.environ[\"TWILIO_ACCOUNT_SID\"]).update(\n    auth_token_promotion=\"promote\"\n)\n",[1012],{"type":42,"tag":192,"props":1013,"children":1014},{"__ignoreMap":242},[1015,1023,1030,1037,1044,1052,1060],{"type":42,"tag":248,"props":1016,"children":1017},{"class":250,"line":251},[1018],{"type":42,"tag":248,"props":1019,"children":1020},{},[1021],{"type":48,"value":1022},"# Promote secondary Auth Token to primary via API\n",{"type":42,"tag":248,"props":1024,"children":1025},{"class":250,"line":260},[1026],{"type":42,"tag":248,"props":1027,"children":1028},{},[1029],{"type":48,"value":266},{"type":42,"tag":248,"props":1031,"children":1032},{"class":250,"line":269},[1033],{"type":42,"tag":248,"props":1034,"children":1035},{"emptyLinePlaceholder":273},[1036],{"type":48,"value":276},{"type":42,"tag":248,"props":1038,"children":1039},{"class":250,"line":279},[1040],{"type":42,"tag":248,"props":1041,"children":1042},{},[1043],{"type":48,"value":285},{"type":42,"tag":248,"props":1045,"children":1046},{"class":250,"line":534},[1047],{"type":42,"tag":248,"props":1048,"children":1049},{},[1050],{"type":48,"value":1051},"account = client.api.accounts(os.environ[\"TWILIO_ACCOUNT_SID\"]).update(\n",{"type":42,"tag":248,"props":1053,"children":1054},{"class":250,"line":670},[1055],{"type":42,"tag":248,"props":1056,"children":1057},{},[1058],{"type":48,"value":1059},"    auth_token_promotion=\"promote\"\n",{"type":42,"tag":248,"props":1061,"children":1062},{"class":250,"line":679},[1063],{"type":42,"tag":248,"props":1064,"children":1065},{},[1066],{"type":48,"value":540},{"type":42,"tag":51,"props":1068,"children":1069},{},[1070,1075],{"type":42,"tag":164,"props":1071,"children":1072},{},[1073],{"type":48,"value":1074},"Important:",{"type":48,"value":1076}," Auth Token rotation invalidates all active sessions using that token. Plan the switchover to minimize downtime.",{"type":42,"tag":51,"props":1078,"children":1079},{},[1080,1085],{"type":42,"tag":164,"props":1081,"children":1082},{},[1083],{"type":48,"value":1084},"API Keys cannot be rotated",{"type":48,"value":1086}," — if an API Key is compromised, delete it and create a new one:",{"type":42,"tag":182,"props":1088,"children":1089},{},[1090,1095],{"type":42,"tag":186,"props":1091,"children":1092},{},[1093],{"type":48,"value":1094},"Console > Account > API keys & tokens > select key > Delete",{"type":42,"tag":186,"props":1096,"children":1097},{},[1098,1100],{"type":48,"value":1099},"Or via API: ",{"type":42,"tag":192,"props":1101,"children":1103},{"className":1102},[],[1104],{"type":48,"value":1105},"client.keys(key_sid).delete()",{"type":42,"tag":51,"props":1107,"children":1108},{},[1109,1113,1114],{"type":42,"tag":164,"props":1110,"children":1111},{},[1112],{"type":48,"value":809},{"type":48,"value":811},{"type":42,"tag":206,"props":1115,"children":1118},{"href":1116,"rel":1117},"https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fapi\u002Fauthtoken",[210],[1119],{"type":48,"value":1120},"Auth Token REST API",{"type":42,"tag":353,"props":1122,"children":1124},{"id":1123},"access-tokens-client-side-sdks",[1125],{"type":48,"value":1126},"Access Tokens (client-side SDKs)",{"type":42,"tag":51,"props":1128,"children":1129},{},[1130],{"type":48,"value":1131},"Short-lived JWTs for authenticating browser\u002Fmobile clients (Voice JS SDK, Conversations SDK, Video SDK). Generate server-side and pass to the client.",{"type":42,"tag":51,"props":1133,"children":1134},{},[1135],{"type":42,"tag":164,"props":1136,"children":1137},{},[1138],{"type":48,"value":235},{"type":42,"tag":237,"props":1140,"children":1142},{"className":239,"code":1141,"language":241,"meta":242,"style":242},"from twilio.jwt.access_token import AccessToken\nfrom twilio.jwt.access_token.grants import VoiceGrant\n\ntoken = AccessToken(\n    os.environ[\"TWILIO_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_API_KEY\"],\n    os.environ[\"TWILIO_API_SECRET\"],\n    identity=\"user-123\",\n    ttl=3600\n)\ntoken.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\nprint(token.to_jwt())\n",[1143],{"type":42,"tag":192,"props":1144,"children":1145},{"__ignoreMap":242},[1146,1154,1162,1169,1177,1185,1193,1200,1208,1216,1223,1231],{"type":42,"tag":248,"props":1147,"children":1148},{"class":250,"line":251},[1149],{"type":42,"tag":248,"props":1150,"children":1151},{},[1152],{"type":48,"value":1153},"from twilio.jwt.access_token import AccessToken\n",{"type":42,"tag":248,"props":1155,"children":1156},{"class":250,"line":260},[1157],{"type":42,"tag":248,"props":1158,"children":1159},{},[1160],{"type":48,"value":1161},"from twilio.jwt.access_token.grants import VoiceGrant\n",{"type":42,"tag":248,"props":1163,"children":1164},{"class":250,"line":269},[1165],{"type":42,"tag":248,"props":1166,"children":1167},{"emptyLinePlaceholder":273},[1168],{"type":48,"value":276},{"type":42,"tag":248,"props":1170,"children":1171},{"class":250,"line":279},[1172],{"type":42,"tag":248,"props":1173,"children":1174},{},[1175],{"type":48,"value":1176},"token = AccessToken(\n",{"type":42,"tag":248,"props":1178,"children":1179},{"class":250,"line":534},[1180],{"type":42,"tag":248,"props":1181,"children":1182},{},[1183],{"type":48,"value":1184},"    os.environ[\"TWILIO_ACCOUNT_SID\"],\n",{"type":42,"tag":248,"props":1186,"children":1187},{"class":250,"line":670},[1188],{"type":42,"tag":248,"props":1189,"children":1190},{},[1191],{"type":48,"value":1192},"    os.environ[\"TWILIO_API_KEY\"],\n",{"type":42,"tag":248,"props":1194,"children":1195},{"class":250,"line":679},[1196],{"type":42,"tag":248,"props":1197,"children":1198},{},[1199],{"type":48,"value":523},{"type":42,"tag":248,"props":1201,"children":1202},{"class":250,"line":688},[1203],{"type":42,"tag":248,"props":1204,"children":1205},{},[1206],{"type":48,"value":1207},"    identity=\"user-123\",\n",{"type":42,"tag":248,"props":1209,"children":1210},{"class":250,"line":697},[1211],{"type":42,"tag":248,"props":1212,"children":1213},{},[1214],{"type":48,"value":1215},"    ttl=3600\n",{"type":42,"tag":248,"props":1217,"children":1218},{"class":250,"line":706},[1219],{"type":42,"tag":248,"props":1220,"children":1221},{},[1222],{"type":48,"value":540},{"type":42,"tag":248,"props":1224,"children":1225},{"class":250,"line":714},[1226],{"type":42,"tag":248,"props":1227,"children":1228},{},[1229],{"type":48,"value":1230},"token.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\n",{"type":42,"tag":248,"props":1232,"children":1234},{"class":250,"line":1233},12,[1235],{"type":42,"tag":248,"props":1236,"children":1237},{},[1238],{"type":48,"value":1239},"print(token.to_jwt())\n",{"type":42,"tag":51,"props":1241,"children":1242},{},[1243],{"type":42,"tag":164,"props":1244,"children":1245},{},[1246],{"type":48,"value":293},{"type":42,"tag":237,"props":1248,"children":1250},{"className":296,"code":1249,"language":298,"meta":242,"style":242},"const { AccessToken } = require(\"twilio\").jwt;\nconst { VoiceGrant } = AccessToken;\n\nconst token = new AccessToken(\n    process.env.TWILIO_ACCOUNT_SID,\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { identity: \"user-123\", ttl: 3600 }\n);\ntoken.addGrant(new VoiceGrant({ outgoingApplicationSid: \"APxxxx\" }));\nconsole.log(token.toJwt());\n",[1251],{"type":42,"tag":192,"props":1252,"children":1253},{"__ignoreMap":242},[1254,1262,1270,1277,1285,1292,1299,1306,1314,1321,1329],{"type":42,"tag":248,"props":1255,"children":1256},{"class":250,"line":251},[1257],{"type":42,"tag":248,"props":1258,"children":1259},{},[1260],{"type":48,"value":1261},"const { AccessToken } = require(\"twilio\").jwt;\n",{"type":42,"tag":248,"props":1263,"children":1264},{"class":250,"line":260},[1265],{"type":42,"tag":248,"props":1266,"children":1267},{},[1268],{"type":48,"value":1269},"const { VoiceGrant } = AccessToken;\n",{"type":42,"tag":248,"props":1271,"children":1272},{"class":250,"line":269},[1273],{"type":42,"tag":248,"props":1274,"children":1275},{"emptyLinePlaceholder":273},[1276],{"type":48,"value":276},{"type":42,"tag":248,"props":1278,"children":1279},{"class":250,"line":279},[1280],{"type":42,"tag":248,"props":1281,"children":1282},{},[1283],{"type":48,"value":1284},"const token = new AccessToken(\n",{"type":42,"tag":248,"props":1286,"children":1287},{"class":250,"line":534},[1288],{"type":42,"tag":248,"props":1289,"children":1290},{},[1291],{"type":48,"value":318},{"type":42,"tag":248,"props":1293,"children":1294},{"class":250,"line":670},[1295],{"type":42,"tag":248,"props":1296,"children":1297},{},[1298],{"type":48,"value":569},{"type":42,"tag":248,"props":1300,"children":1301},{"class":250,"line":679},[1302],{"type":42,"tag":248,"props":1303,"children":1304},{},[1305],{"type":48,"value":577},{"type":42,"tag":248,"props":1307,"children":1308},{"class":250,"line":688},[1309],{"type":42,"tag":248,"props":1310,"children":1311},{},[1312],{"type":48,"value":1313},"    { identity: \"user-123\", ttl: 3600 }\n",{"type":42,"tag":248,"props":1315,"children":1316},{"class":250,"line":697},[1317],{"type":42,"tag":248,"props":1318,"children":1319},{},[1320],{"type":48,"value":334},{"type":42,"tag":248,"props":1322,"children":1323},{"class":250,"line":706},[1324],{"type":42,"tag":248,"props":1325,"children":1326},{},[1327],{"type":48,"value":1328},"token.addGrant(new VoiceGrant({ outgoingApplicationSid: \"APxxxx\" }));\n",{"type":42,"tag":248,"props":1330,"children":1331},{"class":250,"line":714},[1332],{"type":42,"tag":248,"props":1333,"children":1334},{},[1335],{"type":48,"value":1336},"console.log(token.toJwt());\n",{"type":42,"tag":51,"props":1338,"children":1339},{},[1340,1342,1348,1350,1356,1357,1363,1365],{"type":48,"value":1341},"Available grant types: ",{"type":42,"tag":192,"props":1343,"children":1345},{"className":1344},[],[1346],{"type":48,"value":1347},"VoiceGrant",{"type":48,"value":1349},", ",{"type":42,"tag":192,"props":1351,"children":1353},{"className":1352},[],[1354],{"type":48,"value":1355},"VideoGrant",{"type":48,"value":1349},{"type":42,"tag":192,"props":1358,"children":1360},{"className":1359},[],[1361],{"type":48,"value":1362},"ChatGrant",{"type":48,"value":1364}," (Conversations), ",{"type":42,"tag":192,"props":1366,"children":1368},{"className":1367},[],[1369],{"type":48,"value":1370},"SyncGrant",{"type":42,"tag":353,"props":1372,"children":1374},{"id":1373},"environment-variable-reference",[1375],{"type":48,"value":1376},"Environment Variable Reference",{"type":42,"tag":237,"props":1378,"children":1382},{"className":1379,"code":1380,"language":1381,"meta":242,"style":242},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","TWILIO_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n\n# Option 1: Auth Token (testing only)\nTWILIO_AUTH_TOKEN=your_auth_token\n\n# Option 2: API Key (production)\nTWILIO_API_KEY=SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\nTWILIO_API_SECRET=your_api_secret\n\n# Test credentials\nTWILIO_TEST_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\nTWILIO_TEST_AUTH_TOKEN=your_test_auth_token\n","bash",[1383],{"type":42,"tag":192,"props":1384,"children":1385},{"__ignoreMap":242},[1386,1407,1414,1423,1440,1447,1455,1472,1489,1496,1504,1520],{"type":42,"tag":248,"props":1387,"children":1388},{"class":250,"line":251},[1389,1395,1401],{"type":42,"tag":248,"props":1390,"children":1392},{"style":1391},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[1393],{"type":48,"value":1394},"TWILIO_ACCOUNT_SID",{"type":42,"tag":248,"props":1396,"children":1398},{"style":1397},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[1399],{"type":48,"value":1400},"=",{"type":42,"tag":248,"props":1402,"children":1404},{"style":1403},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[1405],{"type":48,"value":1406},"ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n",{"type":42,"tag":248,"props":1408,"children":1409},{"class":250,"line":260},[1410],{"type":42,"tag":248,"props":1411,"children":1412},{"emptyLinePlaceholder":273},[1413],{"type":48,"value":276},{"type":42,"tag":248,"props":1415,"children":1416},{"class":250,"line":269},[1417],{"type":42,"tag":248,"props":1418,"children":1420},{"style":1419},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[1421],{"type":48,"value":1422},"# Option 1: Auth Token (testing only)\n",{"type":42,"tag":248,"props":1424,"children":1425},{"class":250,"line":279},[1426,1431,1435],{"type":42,"tag":248,"props":1427,"children":1428},{"style":1391},[1429],{"type":48,"value":1430},"TWILIO_AUTH_TOKEN",{"type":42,"tag":248,"props":1432,"children":1433},{"style":1397},[1434],{"type":48,"value":1400},{"type":42,"tag":248,"props":1436,"children":1437},{"style":1403},[1438],{"type":48,"value":1439},"your_auth_token\n",{"type":42,"tag":248,"props":1441,"children":1442},{"class":250,"line":534},[1443],{"type":42,"tag":248,"props":1444,"children":1445},{"emptyLinePlaceholder":273},[1446],{"type":48,"value":276},{"type":42,"tag":248,"props":1448,"children":1449},{"class":250,"line":670},[1450],{"type":42,"tag":248,"props":1451,"children":1452},{"style":1419},[1453],{"type":48,"value":1454},"# Option 2: API Key (production)\n",{"type":42,"tag":248,"props":1456,"children":1457},{"class":250,"line":679},[1458,1463,1467],{"type":42,"tag":248,"props":1459,"children":1460},{"style":1391},[1461],{"type":48,"value":1462},"TWILIO_API_KEY",{"type":42,"tag":248,"props":1464,"children":1465},{"style":1397},[1466],{"type":48,"value":1400},{"type":42,"tag":248,"props":1468,"children":1469},{"style":1403},[1470],{"type":48,"value":1471},"SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n",{"type":42,"tag":248,"props":1473,"children":1474},{"class":250,"line":688},[1475,1480,1484],{"type":42,"tag":248,"props":1476,"children":1477},{"style":1391},[1478],{"type":48,"value":1479},"TWILIO_API_SECRET",{"type":42,"tag":248,"props":1481,"children":1482},{"style":1397},[1483],{"type":48,"value":1400},{"type":42,"tag":248,"props":1485,"children":1486},{"style":1403},[1487],{"type":48,"value":1488},"your_api_secret\n",{"type":42,"tag":248,"props":1490,"children":1491},{"class":250,"line":697},[1492],{"type":42,"tag":248,"props":1493,"children":1494},{"emptyLinePlaceholder":273},[1495],{"type":48,"value":276},{"type":42,"tag":248,"props":1497,"children":1498},{"class":250,"line":706},[1499],{"type":42,"tag":248,"props":1500,"children":1501},{"style":1419},[1502],{"type":48,"value":1503},"# Test credentials\n",{"type":42,"tag":248,"props":1505,"children":1506},{"class":250,"line":714},[1507,1512,1516],{"type":42,"tag":248,"props":1508,"children":1509},{"style":1391},[1510],{"type":48,"value":1511},"TWILIO_TEST_ACCOUNT_SID",{"type":42,"tag":248,"props":1513,"children":1514},{"style":1397},[1515],{"type":48,"value":1400},{"type":42,"tag":248,"props":1517,"children":1518},{"style":1403},[1519],{"type":48,"value":1406},{"type":42,"tag":248,"props":1521,"children":1522},{"class":250,"line":1233},[1523,1528,1532],{"type":42,"tag":248,"props":1524,"children":1525},{"style":1391},[1526],{"type":48,"value":1527},"TWILIO_TEST_AUTH_TOKEN",{"type":42,"tag":248,"props":1529,"children":1530},{"style":1397},[1531],{"type":48,"value":1400},{"type":42,"tag":248,"props":1533,"children":1534},{"style":1403},[1535],{"type":48,"value":1536},"your_test_auth_token\n",{"type":42,"tag":172,"props":1538,"children":1539},{},[],{"type":42,"tag":43,"props":1541,"children":1543},{"id":1542},"cannot",[1544],{"type":48,"value":1545},"CANNOT",{"type":42,"tag":182,"props":1547,"children":1548},{},[1549,1559,1593,1603,1613,1623,1632,1651,1661,1671,1681,1691,1701,1711],{"type":42,"tag":186,"props":1550,"children":1551},{},[1552,1557],{"type":42,"tag":164,"props":1553,"children":1554},{},[1555],{"type":48,"value":1556},"Standard keys cannot access \u002FAccounts or \u002FKeys endpoints",{"type":48,"value":1558}," — Returns error 20003 (401). Must use Auth Token or Main API Key for account management.",{"type":42,"tag":186,"props":1560,"children":1561},{},[1562,1567,1569,1575,1577,1583,1585,1591],{"type":42,"tag":164,"props":1563,"children":1564},{},[1565],{"type":48,"value":1566},"No restricted key creation via v2010 API",{"type":48,"value":1568}," — The v2010 ",{"type":42,"tag":192,"props":1570,"children":1572},{"className":1571},[],[1573],{"type":48,"value":1574},"\u002FKeys.json",{"type":48,"value":1576}," endpoint silently ignores ",{"type":42,"tag":192,"props":1578,"children":1580},{"className":1579},[],[1581],{"type":48,"value":1582},"KeyType=restricted",{"type":48,"value":1584}," and ",{"type":42,"tag":192,"props":1586,"children":1588},{"className":1587},[],[1589],{"type":48,"value":1590},"Policy",{"type":48,"value":1592}," parameters, creating a standard key instead. Use the v1 IAM API.",{"type":42,"tag":186,"props":1594,"children":1595},{},[1596,1601],{"type":42,"tag":164,"props":1597,"children":1598},{},[1599],{"type":48,"value":1600},"Restricted keys cannot generate Access Tokens",{"type":48,"value":1602}," — Only Standard and Main keys can create client SDK tokens.",{"type":42,"tag":186,"props":1604,"children":1605},{},[1606,1611],{"type":42,"tag":164,"props":1607,"children":1608},{},[1609],{"type":48,"value":1610},"No individual Access Token revocation",{"type":48,"value":1612}," — Tokens are valid until expiration (max 24h). To revoke early, delete the API key that issued them.",{"type":42,"tag":186,"props":1614,"children":1615},{},[1616,1621],{"type":42,"tag":164,"props":1617,"children":1618},{},[1619],{"type":48,"value":1620},"Subaccount credentials cannot access parent or sibling resources",{"type":48,"value":1622}," — Each subaccount has its own Auth Token and API Keys. Use the subaccount's own credentials to access its resources — never the parent account's credentials.",{"type":42,"tag":186,"props":1624,"children":1625},{},[1626,1630],{"type":42,"tag":164,"props":1627,"children":1628},{},[1629],{"type":48,"value":1084},{"type":48,"value":1631}," — No key rotation API exists. To replace a compromised key: create a new key, update your app, then delete the old key.",{"type":42,"tag":186,"props":1633,"children":1634},{},[1635,1640,1642,1649],{"type":42,"tag":164,"props":1636,"children":1637},{},[1638],{"type":48,"value":1639},"PKCV is an advanced feature for compliance-heavy industries",{"type":48,"value":1641}," — Public Key Client Validation adds client-certificate-style auth. Incompatible with Flex, Studio, and TaskRouter. Once enforcement is enabled, Auth Token authentication is disabled (one-way door). See ",{"type":42,"tag":206,"props":1643,"children":1646},{"href":1644,"rel":1645},"https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Fpkcv",[210],[1647],{"type":48,"value":1648},"PKCV docs",{"type":48,"value":1650}," — consider this only if your security team requires mutual TLS-equivalent authentication.",{"type":42,"tag":186,"props":1652,"children":1653},{},[1654,1659],{"type":42,"tag":164,"props":1655,"children":1656},{},[1657],{"type":48,"value":1658},"Test credentials work with only 4 endpoints",{"type":48,"value":1660}," — Messages, Calls, IncomingPhoneNumbers, and Lookups. All other endpoints return 403.",{"type":42,"tag":186,"props":1662,"children":1663},{},[1664,1669],{"type":42,"tag":164,"props":1665,"children":1666},{},[1667],{"type":48,"value":1668},"API Key Secret shown only at creation",{"type":48,"value":1670}," — Cannot be retrieved afterward. If lost, create a new key.",{"type":42,"tag":186,"props":1672,"children":1673},{},[1674,1679],{"type":42,"tag":164,"props":1675,"children":1676},{},[1677],{"type":48,"value":1678},"FriendlyName max 64 characters for keys",{"type":48,"value":1680}," — 65+ characters returns error 70001.",{"type":42,"tag":186,"props":1682,"children":1683},{},[1684,1689],{"type":42,"tag":164,"props":1685,"children":1686},{},[1687],{"type":48,"value":1688},"Restricted keys limited to 100 permissions per key",{"type":48,"value":1690}," — Exceeding this limit is rejected at creation.",{"type":42,"tag":186,"props":1692,"children":1693},{},[1694,1699],{"type":42,"tag":164,"props":1695,"children":1696},{},[1697],{"type":48,"value":1698},"Cannot create Main API Keys via REST API",{"type":48,"value":1700}," — Console only",{"type":42,"tag":186,"props":1702,"children":1703},{},[1704,1709],{"type":42,"tag":164,"props":1705,"children":1706},{},[1707],{"type":48,"value":1708},"Cannot set Access Token TTL beyond 24 hours",{"type":48,"value":1710}," — Maximum lifetime is 24h",{"type":42,"tag":186,"props":1712,"children":1713},{},[1714,1719],{"type":42,"tag":164,"props":1715,"children":1716},{},[1717],{"type":48,"value":1718},"Cannot use test credentials with real numbers",{"type":48,"value":1720}," — Test credentials only work with test magic numbers",{"type":42,"tag":172,"props":1722,"children":1723},{},[],{"type":42,"tag":43,"props":1725,"children":1727},{"id":1726},"next-steps",[1728],{"type":48,"value":1729},"Next Steps",{"type":42,"tag":182,"props":1731,"children":1732},{},[1733,1747,1762,1777],{"type":42,"tag":186,"props":1734,"children":1735},{},[1736,1741,1742],{"type":42,"tag":164,"props":1737,"children":1738},{},[1739],{"type":48,"value":1740},"Account setup and phone numbers:",{"type":48,"value":811},{"type":42,"tag":192,"props":1743,"children":1745},{"className":1744},[],[1746],{"type":48,"value":197},{"type":42,"tag":186,"props":1748,"children":1749},{},[1750,1755,1756],{"type":42,"tag":164,"props":1751,"children":1752},{},[1753],{"type":48,"value":1754},"Security best practices (credential management, key rotation):",{"type":48,"value":811},{"type":42,"tag":192,"props":1757,"children":1759},{"className":1758},[],[1760],{"type":48,"value":1761},"twilio-security-hardening",{"type":42,"tag":186,"props":1763,"children":1764},{},[1765,1770,1771],{"type":42,"tag":164,"props":1766,"children":1767},{},[1768],{"type":48,"value":1769},"Restricted API keys (fine-grained permissions):",{"type":48,"value":811},{"type":42,"tag":206,"props":1772,"children":1774},{"href":814,"rel":1773},[210],[1775],{"type":48,"value":1776},"Docs",{"type":42,"tag":186,"props":1778,"children":1779},{},[1780,1785,1786],{"type":42,"tag":164,"props":1781,"children":1782},{},[1783],{"type":48,"value":1784},"Auth Token rotation:",{"type":48,"value":811},{"type":42,"tag":206,"props":1787,"children":1789},{"href":1116,"rel":1788},[210],[1790],{"type":48,"value":1791},"REST API",{"type":42,"tag":1793,"props":1794,"children":1795},"style",{},[1796],{"type":48,"value":1797},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":1799,"total":1920},[1800,1818,1834,1846,1866,1888,1908],{"slug":1801,"name":1801,"fn":1802,"description":1803,"org":1804,"tags":1805,"stars":25,"repoUrl":26,"updatedAt":27},"accessibility-and-inclusive-visualization","make data visualizations accessible","Make data visualizations accessible and inclusive. Use when the user needs chart or diagram accessibility guidance, text alternatives for complex visuals, color and contrast review, keyboard support, reduced-motion behavior for animation or parallax, or an accessibility QA workflow for exported figures, UML-like diagrams, and dashboards.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1806,1809,1812,1815],{"name":1807,"slug":1808,"type":15},"Accessibility","accessibility",{"name":1810,"slug":1811,"type":15},"Charts","charts",{"name":1813,"slug":1814,"type":15},"Data Visualization","data-visualization",{"name":1816,"slug":1817,"type":15},"Design","design",{"slug":1819,"name":1819,"fn":1820,"description":1821,"org":1822,"tags":1823,"stars":25,"repoUrl":26,"updatedAt":1833},"agent-browser","automate browser interactions for agents","Browser automation CLI for AI agents. Use when the user needs to interact with websites, verify dev server output, test web apps, navigate pages, fill forms, click buttons, take screenshots, extract data, or automate any browser task. Also triggers when a dev server starts so you can verify it visually.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1824,1827,1830],{"name":1825,"slug":1826,"type":15},"Agents","agents",{"name":1828,"slug":1829,"type":15},"Browser Automation","browser-automation",{"name":1831,"slug":1832,"type":15},"Testing","testing","2026-04-06T18:41:03.44016",{"slug":1835,"name":1835,"fn":1836,"description":1837,"org":1838,"tags":1839,"stars":25,"repoUrl":26,"updatedAt":1845},"agent-browser-verify","verify dev server output with automated browser","Automated browser verification for dev servers. Triggers when a dev server starts to run a visual gut-check with agent-browser — verifies the page loads, checks for console errors, validates key UI elements, and reports pass\u002Ffail before continuing.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1840,1841,1844],{"name":1828,"slug":1829,"type":15},{"name":1842,"slug":1843,"type":15},"Local Development","local-development",{"name":1831,"slug":1832,"type":15},"2026-04-06T18:41:17.526867",{"slug":1847,"name":1847,"fn":1848,"description":1849,"org":1850,"tags":1851,"stars":25,"repoUrl":26,"updatedAt":1865},"agents-sdk","build AI agents on Cloudflare Workers","Build AI agents on Cloudflare Workers using the Agents SDK. Load when creating stateful agents, durable workflows, real-time WebSocket apps, scheduled tasks, MCP servers, or chat applications. Covers Agent class, state management, callable RPC, Workflows integration, and React hooks. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1852,1853,1856,1859,1862],{"name":1825,"slug":1826,"type":15},{"name":1854,"slug":1855,"type":15},"Cloudflare Workers","cloudflare-workers",{"name":1857,"slug":1858,"type":15},"SDK","sdk",{"name":1860,"slug":1861,"type":15},"Serverless","serverless",{"name":1863,"slug":1864,"type":15},"WebSockets","websockets","2026-04-06T18:39:51.717063",{"slug":1867,"name":1867,"fn":1868,"description":1869,"org":1870,"tags":1871,"stars":25,"repoUrl":26,"updatedAt":1887},"ai-elements","build chat UIs with AI Elements","AI Elements component library guidance — pre-built React components for AI interfaces built on shadcn\u002Fui. Use when building chat UIs, message displays, tool call rendering, streaming responses, reasoning panels, or any AI-native interface with the AI SDK.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1872,1875,1878,1881,1884],{"name":1873,"slug":1874,"type":15},"Frontend","frontend",{"name":1876,"slug":1877,"type":15},"React","react",{"name":1879,"slug":1880,"type":15},"shadcn\u002Fui","shadcn-ui",{"name":1882,"slug":1883,"type":15},"UI Components","ui-components",{"name":1885,"slug":1886,"type":15},"Vercel","vercel","2026-04-06T18:40:59.619419",{"slug":1889,"name":1889,"fn":1890,"description":1891,"org":1892,"tags":1893,"stars":25,"repoUrl":26,"updatedAt":1907},"ai-gateway","configure Vercel AI Gateway","Vercel AI Gateway expert guidance. Use when configuring model routing, provider failover, cost tracking, or managing multiple AI providers through a unified API.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1894,1897,1900,1903,1906],{"name":1895,"slug":1896,"type":15},"AI Infrastructure","ai-infrastructure",{"name":1898,"slug":1899,"type":15},"Cost Optimization","cost-optimization",{"name":1901,"slug":1902,"type":15},"LLM","llm",{"name":1904,"slug":1905,"type":15},"Performance","performance",{"name":1885,"slug":1886,"type":15},"2026-04-06T18:40:44.377464",{"slug":1909,"name":1909,"fn":1910,"description":1911,"org":1912,"tags":1913,"stars":25,"repoUrl":26,"updatedAt":1919},"ai-generation-persistence","implement persistence patterns for AI generations","AI generation persistence patterns — unique IDs, addressable URLs, database storage, and cost tracking for every LLM generation",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1914,1915,1918],{"name":1898,"slug":1899,"type":15},{"name":1916,"slug":1917,"type":15},"Database","database",{"name":1901,"slug":1902,"type":15},"2026-04-06T18:41:08.513425",600,{"items":1922,"total":2117},[1923,1944,1967,1984,1998,2015,2034,2046,2060,2074,2086,2101],{"slug":1924,"name":1924,"fn":1925,"description":1926,"org":1927,"tags":1928,"stars":1941,"repoUrl":1942,"updatedAt":1943},"prior-auth-packet-builder","build healthcare prior authorization packets","Build a concise prior authorization packet from local case files and payer policy docs.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1929,1932,1935,1938],{"name":1930,"slug":1931,"type":15},"Documents","documents",{"name":1933,"slug":1934,"type":15},"Healthcare","healthcare",{"name":1936,"slug":1937,"type":15},"Insurance","insurance",{"name":1939,"slug":1940,"type":15},"Regulatory Compliance","regulatory-compliance",28169,"https:\u002F\u002Fgithub.com\u002Fopenai\u002Fopenai-agents-python","2026-04-16T05:11:39.180399",{"slug":1945,"name":1945,"fn":1946,"description":1947,"org":1948,"tags":1949,"stars":1964,"repoUrl":1965,"updatedAt":1966},"aspnet-core","build ASP.NET Core web applications","Build, review, refactor, or architect ASP.NET Core web applications using current official guidance for .NET web development. Use when working on Blazor Web Apps, Razor Pages, MVC, Minimal APIs, controller-based Web APIs, SignalR, gRPC, middleware, dependency injection, configuration, authentication, authorization, testing, performance, deployment, or ASP.NET Core upgrades.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1950,1953,1955,1958,1961],{"name":1951,"slug":1952,"type":15},".NET","dotnet",{"name":1954,"slug":1945,"type":15},"ASP.NET Core",{"name":1956,"slug":1957,"type":15},"Blazor","blazor",{"name":1959,"slug":1960,"type":15},"C#","csharp",{"name":1962,"slug":1963,"type":15},"Web Development","web-development",23787,"https:\u002F\u002Fgithub.com\u002Fopenai\u002Fskills","2026-04-12T05:07:02.819491",{"slug":1968,"name":1968,"fn":1969,"description":1970,"org":1971,"tags":1972,"stars":1964,"repoUrl":1965,"updatedAt":1983},"chatgpt-apps","build ChatGPT Apps SDK applications","Build, scaffold, refactor, and troubleshoot ChatGPT Apps SDK applications that combine an MCP server and widget UI. Use when Codex needs to design tools, register UI resources, wire the MCP Apps bridge or ChatGPT compatibility APIs, apply Apps SDK metadata or CSP or domain settings, or produce a docs-aligned project scaffold. Prefer a docs-first workflow by invoking the openai-docs skill or OpenAI developer docs MCP tools before generating code.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1973,1976,1979,1982],{"name":1974,"slug":1975,"type":15},"Apps SDK","apps-sdk",{"name":1977,"slug":1978,"type":15},"ChatGPT","chatgpt",{"name":1980,"slug":1981,"type":15},"MCP","mcp",{"name":9,"slug":8,"type":15},"2026-04-12T05:07:05.468097",{"slug":1985,"name":1985,"fn":1986,"description":1987,"org":1988,"tags":1989,"stars":1964,"repoUrl":1965,"updatedAt":1997},"cli-creator","build CLIs from API docs","Build a composable CLI for Codex from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local script. Use when the user wants Codex to create a command-line tool that can run from any repo, expose composable read\u002Fwrite commands, return stable JSON, manage auth, and pair with a companion skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1990,1991,1994],{"name":20,"slug":21,"type":15},{"name":1992,"slug":1993,"type":15},"CLI","cli",{"name":1995,"slug":1996,"type":15},"Codex","codex","2026-04-12T05:07:04.132762",{"slug":1999,"name":1999,"fn":2000,"description":2001,"org":2002,"tags":2003,"stars":1964,"repoUrl":1965,"updatedAt":2014},"cloudflare-deploy","deploy projects to Cloudflare","Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2004,2007,2010,2011],{"name":2005,"slug":2006,"type":15},"Cloudflare","cloudflare",{"name":2008,"slug":2009,"type":15},"Cloudflare Pages","cloudflare-pages",{"name":1854,"slug":1855,"type":15},{"name":2012,"slug":2013,"type":15},"Deployment","deployment","2026-04-12T05:07:14.275118",{"slug":2016,"name":2016,"fn":2017,"description":2018,"org":2019,"tags":2020,"stars":1964,"repoUrl":1965,"updatedAt":2033},"define-goal","define and set measurable project goals","Help the user define a concrete, measurable goal before starting work, especially when they ask to use the goal tool, create a goal, set an objective, clarify success criteria, or turn a fuzzy intention into a quantitative outcome. Use this skill for goal creation and goal refinement only; it does not manage durable snapshots, decision logs, or long-running execution artifacts.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2021,2024,2027,2030],{"name":2022,"slug":2023,"type":15},"Productivity","productivity",{"name":2025,"slug":2026,"type":15},"Project Management","project-management",{"name":2028,"slug":2029,"type":15},"Strategy","strategy",{"name":2031,"slug":2032,"type":15},"Task Management","task-management","2026-05-23T06:17:16.870838",{"slug":2035,"name":2035,"fn":2036,"description":2037,"org":2038,"tags":2039,"stars":1964,"repoUrl":1965,"updatedAt":2045},"figma","translate Figma designs into code","Use the Figma MCP server to fetch design context, screenshots, variables, and assets from Figma, and to translate Figma nodes into production code. Trigger when a task involves Figma URLs, node IDs, design-to-code implementation, or Figma MCP setup and troubleshooting.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2040,2041,2043,2044],{"name":1816,"slug":1817,"type":15},{"name":2042,"slug":2035,"type":15},"Figma",{"name":1873,"slug":1874,"type":15},{"name":1980,"slug":1981,"type":15},"2026-04-12T05:06:47.939943",{"slug":2047,"name":2047,"fn":2048,"description":2049,"org":2050,"tags":2051,"stars":1964,"repoUrl":1965,"updatedAt":2059},"figma-code-connect-components","connect Figma designs to code components","Connects Figma design components to code components using Code Connect mapping tools. Use when user says \"code connect\", \"connect this component to code\", \"map this component\", \"link component to code\", \"create code connect mapping\", or wants to establish mappings between Figma designs and code implementations. For canvas writes via `use_figma`, use `figma-use`.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2052,2053,2056,2057,2058],{"name":1816,"slug":1817,"type":15},{"name":2054,"slug":2055,"type":15},"Design System","design-system",{"name":2042,"slug":2035,"type":15},{"name":1873,"slug":1874,"type":15},{"name":1882,"slug":1883,"type":15},"2026-05-10T05:59:52.971881",{"slug":2061,"name":2061,"fn":2062,"description":2063,"org":2064,"tags":2065,"stars":1964,"repoUrl":1965,"updatedAt":2073},"figma-create-design-system-rules","generate design system rules from Figma","Generates custom design system rules for the user's codebase. Use when user says \"create design system rules\", \"generate rules for my project\", \"set up design rules\", \"customize design system guidelines\", or wants to establish project-specific conventions for Figma-to-code workflows. Requires Figma MCP server connection.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2066,2067,2068,2071,2072],{"name":1816,"slug":1817,"type":15},{"name":2054,"slug":2055,"type":15},{"name":2069,"slug":2070,"type":15},"Documentation","documentation",{"name":2042,"slug":2035,"type":15},{"name":1873,"slug":1874,"type":15},"2026-05-16T06:07:47.821474",{"slug":2075,"name":2075,"fn":2076,"description":2077,"org":2078,"tags":2079,"stars":1964,"repoUrl":1965,"updatedAt":2085},"figma-implement-design","translate Figma designs into application code","Translates Figma designs into production-ready application code with 1:1 visual fidelity. Use when implementing UI code from Figma files, when user mentions \"implement design\", \"generate code\", \"implement component\", provides Figma URLs, or asks to build components matching Figma specs. For Figma canvas writes via `use_figma`, use `figma-use`.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2080,2081,2082,2083,2084],{"name":1816,"slug":1817,"type":15},{"name":2042,"slug":2035,"type":15},{"name":1873,"slug":1874,"type":15},{"name":1882,"slug":1883,"type":15},{"name":1962,"slug":1963,"type":15},"2026-05-16T06:07:40.583615",{"slug":2087,"name":2087,"fn":2088,"description":2089,"org":2090,"tags":2091,"stars":1964,"repoUrl":1965,"updatedAt":2100},"hatch-pet","create animated pets for Codex","Create, repair, validate, visually QA, and package Codex-compatible animated pets and pet spritesheets from character art, generated images, company or prospect brand cues, or visual references. Use when a user wants a lightweight-worker Codex pet workflow, a non-pixel custom pet style, a prospect or company mascot pet, or a full 8x9 animated pet atlas with transparent unused cells, QA contact sheets, and pet.json packaging. This skill composes the installed $imagegen system skill for visual generation and uses bundled scripts for deterministic spritesheet assembly.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2092,2095,2096,2099],{"name":2093,"slug":2094,"type":15},"Animation","animation",{"name":1995,"slug":1996,"type":15},{"name":2097,"slug":2098,"type":15},"Creative","creative",{"name":1816,"slug":1817,"type":15},"2026-05-02T05:31:48.48485",{"slug":2102,"name":2102,"fn":2103,"description":2104,"org":2105,"tags":2106,"stars":1964,"repoUrl":1965,"updatedAt":2116},"imagegen","generate and edit raster images","Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output should be a bitmap asset rather than repo-native code or vector. Do not use when the task is better handled by editing existing SVG\u002Fvector\u002Fcode-native assets, extending an established icon or logo system, or building the visual directly in HTML\u002FCSS\u002Fcanvas.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2107,2108,2109,2112,2115],{"name":2097,"slug":2098,"type":15},{"name":1816,"slug":1817,"type":15},{"name":2110,"slug":2111,"type":15},"Image Generation","image-generation",{"name":2113,"slug":2114,"type":15},"Images","images",{"name":9,"slug":8,"type":15},"2026-05-15T06:23:24.312127",675]