[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-openai-twilio-security-api-auth":3,"mdc--pf2duy-key":36,"related-repo-openai-twilio-security-api-auth":1436,"related-org-openai-twilio-security-api-auth":1559},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":25,"repoUrl":26,"updatedAt":27,"license":28,"forks":29,"topics":30,"repo":31,"sourceUrl":34,"mdContent":35},"twilio-security-api-auth","implement Twilio API authentication methods","Choose the right Twilio authentication method and implement it correctly. Covers Auth Token (testing only), API Keys (production standard), OAuth2 client_credentials (time-limited bearer tokens), Access Tokens (client-side SDKs), and test credentials. Use this skill before making any Twilio API calls in production.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"openai","OpenAI","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fopenai.png",[12,16,19,22],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Auth","auth",{"name":20,"slug":21,"type":15},"API Development","api-development",{"name":23,"slug":24,"type":15},"Twilio","twilio",3992,"https:\u002F\u002Fgithub.com\u002Fopenai\u002Fplugins","2026-06-30T19:00:57.102",null,465,[],{"repoUrl":26,"stars":25,"forks":29,"topics":32,"description":33},[],"OpenAI Plugins","https:\u002F\u002Fgithub.com\u002Fopenai\u002Fplugins\u002Ftree\u002FHEAD\u002Fplugins\u002Ftwilio-developer-kit\u002Fskills\u002Ftwilio-security-api-auth","---\nname: twilio-security-api-auth\ndescription: >\n  Choose the right Twilio authentication method and implement it correctly.\n  Covers Auth Token (testing only), API Keys (production standard), OAuth2\n  client_credentials (time-limited bearer tokens), Access Tokens (client-side\n  SDKs), and test credentials. Use this skill before making any Twilio API\n  calls in production.\n---\n\n## Overview\n\nTwilio supports four authentication methods. Choosing the wrong one is a security risk — Auth Tokens in production code are the most common credential leak.\n\n| Method | Use for | Token lifetime | Revocable individually |\n|--------|---------|---------------|----------------------|\n| **Auth Token** | Local testing only | Permanent (until rotated) | No — rotation breaks ALL API keys |\n| **API Key + Secret** | Production server-side | Permanent (until deleted) | Yes |\n| **OAuth2 Bearer Token** | Production server-side (enhanced) | 1 hour | Expires automatically |\n| **Access Token (JWT)** | Client-side SDKs (Voice, Video, Chat) | Up to 24 hours | No — delete issuing API key |\n\n**Decision framework:**\n- **Building a quick prototype?** → Auth Token (but switch to API Key before deploying)\n- **Production server-side code?** → API Key + Secret (simplest production auth) or OAuth2 (time-limited tokens)\n- **Browser\u002Fmobile client needs to connect?** → Access Token (JWT) generated server-side\n- **Running tests without charges?** → Test credentials with magic numbers\n\n---\n\n## API Key Authentication (Production Standard)\n\n**Create:** Console → Account → API keys & tokens → Create API key\n\n| Key type | Access | Create via |\n|----------|--------|-----------|\n| **Main** | Full account access | Console only |\n| **Standard** | All resources except \u002FAccounts and \u002FKeys endpoints | Console or API |\n| **Restricted** | Specific resources only (up to 100 permissions) | Console or v1 IAM API only |\n\n**Python**\n```python\nimport os\nfrom twilio.rest import Client\n\nclient = Client(\n    os.environ[\"TWILIO_API_KEY\"],      # SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n    os.environ[\"TWILIO_API_SECRET\"],\n    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n)\n```\n\n**Node.js**\n```node\nconst client = require(\"twilio\")(\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n);\n```\n\n---\n\n## OAuth2 Authentication (Client Credentials)\n\nTime-limited bearer tokens that expire after 1 hour. More secure than permanent API keys for server-to-server communication.\n\n### Step 1 — Create an OAuth App\n\nCreate an OAuth App in the Twilio Console to get a Client ID and Client Secret.\n\n### Step 2 — Request a Bearer Token\n\n**cURL**\n```bash\ncurl -X POST 'https:\u002F\u002Foauth.twilio.com\u002Fv2\u002Ftoken' \\\n  -H 'Content-Type: application\u002Fx-www-form-urlencoded' \\\n  -d 'client_id={ClientID}' \\\n  -d 'client_secret={ClientSecret}' \\\n  -d 'grant_type=client_credentials'\n```\n\n**Response:**\n```json\n{\n    \"access_token\": \"{BearerToken}\",\n    \"token_type\": \"Bearer\",\n    \"expires_in\": 3600\n}\n```\n\n### Step 3 — Use the Bearer Token\n\n```bash\ncurl 'https:\u002F\u002Fapi.twilio.com\u002F2010-04-01\u002FAccounts\u002F{AccountSID}\u002FMessages.json' \\\n  -H 'Authorization: Bearer {BearerToken}'\n```\n\n### SDK Support\n\nOAuth2 is supported in all Twilio SDKs:\n\n| Language | Minimum version |\n|----------|----------------|\n| Java | 10.6.0 |\n| C#\u002F.NET | 7.6.0 |\n| Node.js | 5.4.0 |\n| Python | 9.4.1 |\n| Ruby | 7.4.0 |\n| PHP | 8.5.0 |\n| Go | 1.25.1 |\n\n**Docs:** [OAuth access tokens](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Foauth-apps\u002Foauth-access-token) | [Segment OAuth connections](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fsegment\u002Fconnections\u002Foauth)\n\n---\n\n## Access Tokens (Client-Side SDKs)\n\nShort-lived JWTs for authenticating browser\u002Fmobile clients. Generate server-side, pass to the client.\n\n**Python**\n```python\nfrom twilio.jwt.access_token import AccessToken\nfrom twilio.jwt.access_token.grants import VoiceGrant\n\ntoken = AccessToken(\n    os.environ[\"TWILIO_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_API_KEY\"],\n    os.environ[\"TWILIO_API_SECRET\"],\n    identity=\"user-123\",\n    ttl=3600\n)\ntoken.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\nprint(token.to_jwt())\n```\n\nGrant types: `VoiceGrant`, `VideoGrant`, `ChatGrant` (Conversations), `SyncGrant`\n\n---\n\n## Test Credentials\n\nMake API calls without charges. Find at Console → Account → API keys & tokens → Test credentials.\n\nMagic numbers: `+15005550006` (valid), `+15005550001` (invalid, error 21211), `+15005550007` (no SMS, error 21612)\n\n---\n\n## CANNOT\n\n- **Standard keys cannot access \u002FAccounts or \u002FKeys endpoints** — Returns 20003 (401). Use Auth Token or Main key.\n- **Cannot create restricted keys via v2010 API** — Silently creates a standard key instead. Use v1 IAM API.\n- **Restricted keys cannot generate Access Tokens** — Only Standard and Main keys can.\n- **Cannot revoke individual Access Tokens** — Valid until expiration (max 24h). Delete the issuing API key to revoke all.\n- **OAuth2 only supports `client_credentials` grant** — No refresh tokens, no authorization code flow.\n- **OAuth2 tokens expire after 1 hour** — Your application must handle token refresh.\n- **API Key Secret shown only at creation** — Cannot be retrieved afterward.\n- **Auth Token rotation breaks ALL API keys** — One-way door. This is why you should use API keys from day one.\n- **Test credentials work with only 4 endpoints** — Messages, Calls, IncomingPhoneNumbers, Lookups. All others return 403.\n\n---\n\n## Next Steps\n\n- **Account setup and sub-accounts:** `twilio-account-setup`\n- **HIPAA account configuration:** `twilio-security-compliance-hipaa`\n- **Webhook signature validation:** `twilio-webhook-architecture`\n- **Credential security patterns:** `twilio-security-hardening`\n",{"data":37,"body":38},{"name":4,"description":6},{"type":39,"children":40},"root",[41,50,56,199,207,252,256,262,272,362,370,457,465,514,517,523,528,535,540,546,554,700,708,839,845,896,902,907,1018,1046,1049,1055,1060,1067,1171,1205,1208,1214,1219,1248,1251,1257,1358,1361,1367,1430],{"type":42,"tag":43,"props":44,"children":46},"element","h2",{"id":45},"overview",[47],{"type":48,"value":49},"text","Overview",{"type":42,"tag":51,"props":52,"children":53},"p",{},[54],{"type":48,"value":55},"Twilio supports four authentication methods. Choosing the wrong one is a security risk — Auth Tokens in production code are the most common credential leak.",{"type":42,"tag":57,"props":58,"children":59},"table",{},[60,89],{"type":42,"tag":61,"props":62,"children":63},"thead",{},[64],{"type":42,"tag":65,"props":66,"children":67},"tr",{},[68,74,79,84],{"type":42,"tag":69,"props":70,"children":71},"th",{},[72],{"type":48,"value":73},"Method",{"type":42,"tag":69,"props":75,"children":76},{},[77],{"type":48,"value":78},"Use for",{"type":42,"tag":69,"props":80,"children":81},{},[82],{"type":48,"value":83},"Token lifetime",{"type":42,"tag":69,"props":85,"children":86},{},[87],{"type":48,"value":88},"Revocable individually",{"type":42,"tag":90,"props":91,"children":92},"tbody",{},[93,121,147,173],{"type":42,"tag":65,"props":94,"children":95},{},[96,106,111,116],{"type":42,"tag":97,"props":98,"children":99},"td",{},[100],{"type":42,"tag":101,"props":102,"children":103},"strong",{},[104],{"type":48,"value":105},"Auth Token",{"type":42,"tag":97,"props":107,"children":108},{},[109],{"type":48,"value":110},"Local testing only",{"type":42,"tag":97,"props":112,"children":113},{},[114],{"type":48,"value":115},"Permanent (until rotated)",{"type":42,"tag":97,"props":117,"children":118},{},[119],{"type":48,"value":120},"No — rotation breaks ALL API keys",{"type":42,"tag":65,"props":122,"children":123},{},[124,132,137,142],{"type":42,"tag":97,"props":125,"children":126},{},[127],{"type":42,"tag":101,"props":128,"children":129},{},[130],{"type":48,"value":131},"API Key + Secret",{"type":42,"tag":97,"props":133,"children":134},{},[135],{"type":48,"value":136},"Production server-side",{"type":42,"tag":97,"props":138,"children":139},{},[140],{"type":48,"value":141},"Permanent (until deleted)",{"type":42,"tag":97,"props":143,"children":144},{},[145],{"type":48,"value":146},"Yes",{"type":42,"tag":65,"props":148,"children":149},{},[150,158,163,168],{"type":42,"tag":97,"props":151,"children":152},{},[153],{"type":42,"tag":101,"props":154,"children":155},{},[156],{"type":48,"value":157},"OAuth2 Bearer Token",{"type":42,"tag":97,"props":159,"children":160},{},[161],{"type":48,"value":162},"Production server-side (enhanced)",{"type":42,"tag":97,"props":164,"children":165},{},[166],{"type":48,"value":167},"1 hour",{"type":42,"tag":97,"props":169,"children":170},{},[171],{"type":48,"value":172},"Expires automatically",{"type":42,"tag":65,"props":174,"children":175},{},[176,184,189,194],{"type":42,"tag":97,"props":177,"children":178},{},[179],{"type":42,"tag":101,"props":180,"children":181},{},[182],{"type":48,"value":183},"Access Token (JWT)",{"type":42,"tag":97,"props":185,"children":186},{},[187],{"type":48,"value":188},"Client-side SDKs (Voice, Video, Chat)",{"type":42,"tag":97,"props":190,"children":191},{},[192],{"type":48,"value":193},"Up to 24 hours",{"type":42,"tag":97,"props":195,"children":196},{},[197],{"type":48,"value":198},"No — delete issuing API key",{"type":42,"tag":51,"props":200,"children":201},{},[202],{"type":42,"tag":101,"props":203,"children":204},{},[205],{"type":48,"value":206},"Decision framework:",{"type":42,"tag":208,"props":209,"children":210},"ul",{},[211,222,232,242],{"type":42,"tag":212,"props":213,"children":214},"li",{},[215,220],{"type":42,"tag":101,"props":216,"children":217},{},[218],{"type":48,"value":219},"Building a quick prototype?",{"type":48,"value":221}," → Auth Token (but switch to API Key before deploying)",{"type":42,"tag":212,"props":223,"children":224},{},[225,230],{"type":42,"tag":101,"props":226,"children":227},{},[228],{"type":48,"value":229},"Production server-side code?",{"type":48,"value":231}," → API Key + Secret (simplest production auth) or OAuth2 (time-limited tokens)",{"type":42,"tag":212,"props":233,"children":234},{},[235,240],{"type":42,"tag":101,"props":236,"children":237},{},[238],{"type":48,"value":239},"Browser\u002Fmobile client needs to connect?",{"type":48,"value":241}," → Access Token (JWT) generated server-side",{"type":42,"tag":212,"props":243,"children":244},{},[245,250],{"type":42,"tag":101,"props":246,"children":247},{},[248],{"type":48,"value":249},"Running tests without charges?",{"type":48,"value":251}," → Test credentials with magic numbers",{"type":42,"tag":253,"props":254,"children":255},"hr",{},[],{"type":42,"tag":43,"props":257,"children":259},{"id":258},"api-key-authentication-production-standard",[260],{"type":48,"value":261},"API Key Authentication (Production Standard)",{"type":42,"tag":51,"props":263,"children":264},{},[265,270],{"type":42,"tag":101,"props":266,"children":267},{},[268],{"type":48,"value":269},"Create:",{"type":48,"value":271}," Console → Account → API keys & tokens → Create API key",{"type":42,"tag":57,"props":273,"children":274},{},[275,296],{"type":42,"tag":61,"props":276,"children":277},{},[278],{"type":42,"tag":65,"props":279,"children":280},{},[281,286,291],{"type":42,"tag":69,"props":282,"children":283},{},[284],{"type":48,"value":285},"Key type",{"type":42,"tag":69,"props":287,"children":288},{},[289],{"type":48,"value":290},"Access",{"type":42,"tag":69,"props":292,"children":293},{},[294],{"type":48,"value":295},"Create via",{"type":42,"tag":90,"props":297,"children":298},{},[299,320,341],{"type":42,"tag":65,"props":300,"children":301},{},[302,310,315],{"type":42,"tag":97,"props":303,"children":304},{},[305],{"type":42,"tag":101,"props":306,"children":307},{},[308],{"type":48,"value":309},"Main",{"type":42,"tag":97,"props":311,"children":312},{},[313],{"type":48,"value":314},"Full account access",{"type":42,"tag":97,"props":316,"children":317},{},[318],{"type":48,"value":319},"Console only",{"type":42,"tag":65,"props":321,"children":322},{},[323,331,336],{"type":42,"tag":97,"props":324,"children":325},{},[326],{"type":42,"tag":101,"props":327,"children":328},{},[329],{"type":48,"value":330},"Standard",{"type":42,"tag":97,"props":332,"children":333},{},[334],{"type":48,"value":335},"All resources except \u002FAccounts and \u002FKeys endpoints",{"type":42,"tag":97,"props":337,"children":338},{},[339],{"type":48,"value":340},"Console or API",{"type":42,"tag":65,"props":342,"children":343},{},[344,352,357],{"type":42,"tag":97,"props":345,"children":346},{},[347],{"type":42,"tag":101,"props":348,"children":349},{},[350],{"type":48,"value":351},"Restricted",{"type":42,"tag":97,"props":353,"children":354},{},[355],{"type":48,"value":356},"Specific resources only (up to 100 permissions)",{"type":42,"tag":97,"props":358,"children":359},{},[360],{"type":48,"value":361},"Console or v1 IAM API only",{"type":42,"tag":51,"props":363,"children":364},{},[365],{"type":42,"tag":101,"props":366,"children":367},{},[368],{"type":48,"value":369},"Python",{"type":42,"tag":371,"props":372,"children":377},"pre",{"className":373,"code":374,"language":375,"meta":376,"style":376},"language-python shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import os\nfrom twilio.rest import Client\n\nclient = Client(\n    os.environ[\"TWILIO_API_KEY\"],      # SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n    os.environ[\"TWILIO_API_SECRET\"],\n    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n)\n","python","",[378],{"type":42,"tag":379,"props":380,"children":381},"code",{"__ignoreMap":376},[382,393,402,412,421,430,439,448],{"type":42,"tag":383,"props":384,"children":387},"span",{"class":385,"line":386},"line",1,[388],{"type":42,"tag":383,"props":389,"children":390},{},[391],{"type":48,"value":392},"import os\n",{"type":42,"tag":383,"props":394,"children":396},{"class":385,"line":395},2,[397],{"type":42,"tag":383,"props":398,"children":399},{},[400],{"type":48,"value":401},"from twilio.rest import Client\n",{"type":42,"tag":383,"props":403,"children":405},{"class":385,"line":404},3,[406],{"type":42,"tag":383,"props":407,"children":409},{"emptyLinePlaceholder":408},true,[410],{"type":48,"value":411},"\n",{"type":42,"tag":383,"props":413,"children":415},{"class":385,"line":414},4,[416],{"type":42,"tag":383,"props":417,"children":418},{},[419],{"type":48,"value":420},"client = Client(\n",{"type":42,"tag":383,"props":422,"children":424},{"class":385,"line":423},5,[425],{"type":42,"tag":383,"props":426,"children":427},{},[428],{"type":48,"value":429},"    os.environ[\"TWILIO_API_KEY\"],      # SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n",{"type":42,"tag":383,"props":431,"children":433},{"class":385,"line":432},6,[434],{"type":42,"tag":383,"props":435,"children":436},{},[437],{"type":48,"value":438},"    os.environ[\"TWILIO_API_SECRET\"],\n",{"type":42,"tag":383,"props":440,"children":442},{"class":385,"line":441},7,[443],{"type":42,"tag":383,"props":444,"children":445},{},[446],{"type":48,"value":447},"    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n",{"type":42,"tag":383,"props":449,"children":451},{"class":385,"line":450},8,[452],{"type":42,"tag":383,"props":453,"children":454},{},[455],{"type":48,"value":456},")\n",{"type":42,"tag":51,"props":458,"children":459},{},[460],{"type":42,"tag":101,"props":461,"children":462},{},[463],{"type":48,"value":464},"Node.js",{"type":42,"tag":371,"props":466,"children":470},{"className":467,"code":468,"language":469,"meta":376,"style":376},"language-node shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","const client = require(\"twilio\")(\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n);\n","node",[471],{"type":42,"tag":379,"props":472,"children":473},{"__ignoreMap":376},[474,482,490,498,506],{"type":42,"tag":383,"props":475,"children":476},{"class":385,"line":386},[477],{"type":42,"tag":383,"props":478,"children":479},{},[480],{"type":48,"value":481},"const client = require(\"twilio\")(\n",{"type":42,"tag":383,"props":483,"children":484},{"class":385,"line":395},[485],{"type":42,"tag":383,"props":486,"children":487},{},[488],{"type":48,"value":489},"    process.env.TWILIO_API_KEY,\n",{"type":42,"tag":383,"props":491,"children":492},{"class":385,"line":404},[493],{"type":42,"tag":383,"props":494,"children":495},{},[496],{"type":48,"value":497},"    process.env.TWILIO_API_SECRET,\n",{"type":42,"tag":383,"props":499,"children":500},{"class":385,"line":414},[501],{"type":42,"tag":383,"props":502,"children":503},{},[504],{"type":48,"value":505},"    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n",{"type":42,"tag":383,"props":507,"children":508},{"class":385,"line":423},[509],{"type":42,"tag":383,"props":510,"children":511},{},[512],{"type":48,"value":513},");\n",{"type":42,"tag":253,"props":515,"children":516},{},[],{"type":42,"tag":43,"props":518,"children":520},{"id":519},"oauth2-authentication-client-credentials",[521],{"type":48,"value":522},"OAuth2 Authentication (Client Credentials)",{"type":42,"tag":51,"props":524,"children":525},{},[526],{"type":48,"value":527},"Time-limited bearer tokens that expire after 1 hour. More secure than permanent API keys for server-to-server communication.",{"type":42,"tag":529,"props":530,"children":532},"h3",{"id":531},"step-1-create-an-oauth-app",[533],{"type":48,"value":534},"Step 1 — Create an OAuth App",{"type":42,"tag":51,"props":536,"children":537},{},[538],{"type":48,"value":539},"Create an OAuth App in the Twilio Console to get a Client ID and Client Secret.",{"type":42,"tag":529,"props":541,"children":543},{"id":542},"step-2-request-a-bearer-token",[544],{"type":48,"value":545},"Step 2 — Request a Bearer Token",{"type":42,"tag":51,"props":547,"children":548},{},[549],{"type":42,"tag":101,"props":550,"children":551},{},[552],{"type":48,"value":553},"cURL",{"type":42,"tag":371,"props":555,"children":559},{"className":556,"code":557,"language":558,"meta":376,"style":376},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","curl -X POST 'https:\u002F\u002Foauth.twilio.com\u002Fv2\u002Ftoken' \\\n  -H 'Content-Type: application\u002Fx-www-form-urlencoded' \\\n  -d 'client_id={ClientID}' \\\n  -d 'client_secret={ClientSecret}' \\\n  -d 'grant_type=client_credentials'\n","bash",[560],{"type":42,"tag":379,"props":561,"children":562},{"__ignoreMap":376},[563,605,630,655,679],{"type":42,"tag":383,"props":564,"children":565},{"class":385,"line":386},[566,572,578,583,589,594,599],{"type":42,"tag":383,"props":567,"children":569},{"style":568},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[570],{"type":48,"value":571},"curl",{"type":42,"tag":383,"props":573,"children":575},{"style":574},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[576],{"type":48,"value":577}," -X",{"type":42,"tag":383,"props":579,"children":580},{"style":574},[581],{"type":48,"value":582}," POST",{"type":42,"tag":383,"props":584,"children":586},{"style":585},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[587],{"type":48,"value":588}," '",{"type":42,"tag":383,"props":590,"children":591},{"style":574},[592],{"type":48,"value":593},"https:\u002F\u002Foauth.twilio.com\u002Fv2\u002Ftoken",{"type":42,"tag":383,"props":595,"children":596},{"style":585},[597],{"type":48,"value":598},"'",{"type":42,"tag":383,"props":600,"children":602},{"style":601},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[603],{"type":48,"value":604}," \\\n",{"type":42,"tag":383,"props":606,"children":607},{"class":385,"line":395},[608,613,617,622,626],{"type":42,"tag":383,"props":609,"children":610},{"style":574},[611],{"type":48,"value":612},"  -H",{"type":42,"tag":383,"props":614,"children":615},{"style":585},[616],{"type":48,"value":588},{"type":42,"tag":383,"props":618,"children":619},{"style":574},[620],{"type":48,"value":621},"Content-Type: application\u002Fx-www-form-urlencoded",{"type":42,"tag":383,"props":623,"children":624},{"style":585},[625],{"type":48,"value":598},{"type":42,"tag":383,"props":627,"children":628},{"style":601},[629],{"type":48,"value":604},{"type":42,"tag":383,"props":631,"children":632},{"class":385,"line":404},[633,638,642,647,651],{"type":42,"tag":383,"props":634,"children":635},{"style":574},[636],{"type":48,"value":637},"  -d",{"type":42,"tag":383,"props":639,"children":640},{"style":585},[641],{"type":48,"value":588},{"type":42,"tag":383,"props":643,"children":644},{"style":574},[645],{"type":48,"value":646},"client_id={ClientID}",{"type":42,"tag":383,"props":648,"children":649},{"style":585},[650],{"type":48,"value":598},{"type":42,"tag":383,"props":652,"children":653},{"style":601},[654],{"type":48,"value":604},{"type":42,"tag":383,"props":656,"children":657},{"class":385,"line":414},[658,662,666,671,675],{"type":42,"tag":383,"props":659,"children":660},{"style":574},[661],{"type":48,"value":637},{"type":42,"tag":383,"props":663,"children":664},{"style":585},[665],{"type":48,"value":588},{"type":42,"tag":383,"props":667,"children":668},{"style":574},[669],{"type":48,"value":670},"client_secret={ClientSecret}",{"type":42,"tag":383,"props":672,"children":673},{"style":585},[674],{"type":48,"value":598},{"type":42,"tag":383,"props":676,"children":677},{"style":601},[678],{"type":48,"value":604},{"type":42,"tag":383,"props":680,"children":681},{"class":385,"line":423},[682,686,690,695],{"type":42,"tag":383,"props":683,"children":684},{"style":574},[685],{"type":48,"value":637},{"type":42,"tag":383,"props":687,"children":688},{"style":585},[689],{"type":48,"value":588},{"type":42,"tag":383,"props":691,"children":692},{"style":574},[693],{"type":48,"value":694},"grant_type=client_credentials",{"type":42,"tag":383,"props":696,"children":697},{"style":585},[698],{"type":48,"value":699},"'\n",{"type":42,"tag":51,"props":701,"children":702},{},[703],{"type":42,"tag":101,"props":704,"children":705},{},[706],{"type":48,"value":707},"Response:",{"type":42,"tag":371,"props":709,"children":713},{"className":710,"code":711,"language":712,"meta":376,"style":376},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n    \"access_token\": \"{BearerToken}\",\n    \"token_type\": \"Bearer\",\n    \"expires_in\": 3600\n}\n","json",[714],{"type":42,"tag":379,"props":715,"children":716},{"__ignoreMap":376},[717,725,768,805,831],{"type":42,"tag":383,"props":718,"children":719},{"class":385,"line":386},[720],{"type":42,"tag":383,"props":721,"children":722},{"style":585},[723],{"type":48,"value":724},"{\n",{"type":42,"tag":383,"props":726,"children":727},{"class":385,"line":395},[728,733,739,744,749,754,759,763],{"type":42,"tag":383,"props":729,"children":730},{"style":585},[731],{"type":48,"value":732},"    \"",{"type":42,"tag":383,"props":734,"children":736},{"style":735},"--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA",[737],{"type":48,"value":738},"access_token",{"type":42,"tag":383,"props":740,"children":741},{"style":585},[742],{"type":48,"value":743},"\"",{"type":42,"tag":383,"props":745,"children":746},{"style":585},[747],{"type":48,"value":748},":",{"type":42,"tag":383,"props":750,"children":751},{"style":585},[752],{"type":48,"value":753}," \"",{"type":42,"tag":383,"props":755,"children":756},{"style":574},[757],{"type":48,"value":758},"{BearerToken}",{"type":42,"tag":383,"props":760,"children":761},{"style":585},[762],{"type":48,"value":743},{"type":42,"tag":383,"props":764,"children":765},{"style":585},[766],{"type":48,"value":767},",\n",{"type":42,"tag":383,"props":769,"children":770},{"class":385,"line":404},[771,775,780,784,788,792,797,801],{"type":42,"tag":383,"props":772,"children":773},{"style":585},[774],{"type":48,"value":732},{"type":42,"tag":383,"props":776,"children":777},{"style":735},[778],{"type":48,"value":779},"token_type",{"type":42,"tag":383,"props":781,"children":782},{"style":585},[783],{"type":48,"value":743},{"type":42,"tag":383,"props":785,"children":786},{"style":585},[787],{"type":48,"value":748},{"type":42,"tag":383,"props":789,"children":790},{"style":585},[791],{"type":48,"value":753},{"type":42,"tag":383,"props":793,"children":794},{"style":574},[795],{"type":48,"value":796},"Bearer",{"type":42,"tag":383,"props":798,"children":799},{"style":585},[800],{"type":48,"value":743},{"type":42,"tag":383,"props":802,"children":803},{"style":585},[804],{"type":48,"value":767},{"type":42,"tag":383,"props":806,"children":807},{"class":385,"line":414},[808,812,817,821,825],{"type":42,"tag":383,"props":809,"children":810},{"style":585},[811],{"type":48,"value":732},{"type":42,"tag":383,"props":813,"children":814},{"style":735},[815],{"type":48,"value":816},"expires_in",{"type":42,"tag":383,"props":818,"children":819},{"style":585},[820],{"type":48,"value":743},{"type":42,"tag":383,"props":822,"children":823},{"style":585},[824],{"type":48,"value":748},{"type":42,"tag":383,"props":826,"children":828},{"style":827},"--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C",[829],{"type":48,"value":830}," 3600\n",{"type":42,"tag":383,"props":832,"children":833},{"class":385,"line":423},[834],{"type":42,"tag":383,"props":835,"children":836},{"style":585},[837],{"type":48,"value":838},"}\n",{"type":42,"tag":529,"props":840,"children":842},{"id":841},"step-3-use-the-bearer-token",[843],{"type":48,"value":844},"Step 3 — Use the Bearer Token",{"type":42,"tag":371,"props":846,"children":848},{"className":556,"code":847,"language":558,"meta":376,"style":376},"curl 'https:\u002F\u002Fapi.twilio.com\u002F2010-04-01\u002FAccounts\u002F{AccountSID}\u002FMessages.json' \\\n  -H 'Authorization: Bearer {BearerToken}'\n",[849],{"type":42,"tag":379,"props":850,"children":851},{"__ignoreMap":376},[852,876],{"type":42,"tag":383,"props":853,"children":854},{"class":385,"line":386},[855,859,863,868,872],{"type":42,"tag":383,"props":856,"children":857},{"style":568},[858],{"type":48,"value":571},{"type":42,"tag":383,"props":860,"children":861},{"style":585},[862],{"type":48,"value":588},{"type":42,"tag":383,"props":864,"children":865},{"style":574},[866],{"type":48,"value":867},"https:\u002F\u002Fapi.twilio.com\u002F2010-04-01\u002FAccounts\u002F{AccountSID}\u002FMessages.json",{"type":42,"tag":383,"props":869,"children":870},{"style":585},[871],{"type":48,"value":598},{"type":42,"tag":383,"props":873,"children":874},{"style":601},[875],{"type":48,"value":604},{"type":42,"tag":383,"props":877,"children":878},{"class":385,"line":395},[879,883,887,892],{"type":42,"tag":383,"props":880,"children":881},{"style":574},[882],{"type":48,"value":612},{"type":42,"tag":383,"props":884,"children":885},{"style":585},[886],{"type":48,"value":588},{"type":42,"tag":383,"props":888,"children":889},{"style":574},[890],{"type":48,"value":891},"Authorization: Bearer {BearerToken}",{"type":42,"tag":383,"props":893,"children":894},{"style":585},[895],{"type":48,"value":699},{"type":42,"tag":529,"props":897,"children":899},{"id":898},"sdk-support",[900],{"type":48,"value":901},"SDK Support",{"type":42,"tag":51,"props":903,"children":904},{},[905],{"type":48,"value":906},"OAuth2 is supported in all Twilio SDKs:",{"type":42,"tag":57,"props":908,"children":909},{},[910,926],{"type":42,"tag":61,"props":911,"children":912},{},[913],{"type":42,"tag":65,"props":914,"children":915},{},[916,921],{"type":42,"tag":69,"props":917,"children":918},{},[919],{"type":48,"value":920},"Language",{"type":42,"tag":69,"props":922,"children":923},{},[924],{"type":48,"value":925},"Minimum version",{"type":42,"tag":90,"props":927,"children":928},{},[929,942,955,967,979,992,1005],{"type":42,"tag":65,"props":930,"children":931},{},[932,937],{"type":42,"tag":97,"props":933,"children":934},{},[935],{"type":48,"value":936},"Java",{"type":42,"tag":97,"props":938,"children":939},{},[940],{"type":48,"value":941},"10.6.0",{"type":42,"tag":65,"props":943,"children":944},{},[945,950],{"type":42,"tag":97,"props":946,"children":947},{},[948],{"type":48,"value":949},"C#\u002F.NET",{"type":42,"tag":97,"props":951,"children":952},{},[953],{"type":48,"value":954},"7.6.0",{"type":42,"tag":65,"props":956,"children":957},{},[958,962],{"type":42,"tag":97,"props":959,"children":960},{},[961],{"type":48,"value":464},{"type":42,"tag":97,"props":963,"children":964},{},[965],{"type":48,"value":966},"5.4.0",{"type":42,"tag":65,"props":968,"children":969},{},[970,974],{"type":42,"tag":97,"props":971,"children":972},{},[973],{"type":48,"value":369},{"type":42,"tag":97,"props":975,"children":976},{},[977],{"type":48,"value":978},"9.4.1",{"type":42,"tag":65,"props":980,"children":981},{},[982,987],{"type":42,"tag":97,"props":983,"children":984},{},[985],{"type":48,"value":986},"Ruby",{"type":42,"tag":97,"props":988,"children":989},{},[990],{"type":48,"value":991},"7.4.0",{"type":42,"tag":65,"props":993,"children":994},{},[995,1000],{"type":42,"tag":97,"props":996,"children":997},{},[998],{"type":48,"value":999},"PHP",{"type":42,"tag":97,"props":1001,"children":1002},{},[1003],{"type":48,"value":1004},"8.5.0",{"type":42,"tag":65,"props":1006,"children":1007},{},[1008,1013],{"type":42,"tag":97,"props":1009,"children":1010},{},[1011],{"type":48,"value":1012},"Go",{"type":42,"tag":97,"props":1014,"children":1015},{},[1016],{"type":48,"value":1017},"1.25.1",{"type":42,"tag":51,"props":1019,"children":1020},{},[1021,1026,1028,1037,1039],{"type":42,"tag":101,"props":1022,"children":1023},{},[1024],{"type":48,"value":1025},"Docs:",{"type":48,"value":1027}," ",{"type":42,"tag":1029,"props":1030,"children":1034},"a",{"href":1031,"rel":1032},"https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Foauth-apps\u002Foauth-access-token",[1033],"nofollow",[1035],{"type":48,"value":1036},"OAuth access tokens",{"type":48,"value":1038}," | ",{"type":42,"tag":1029,"props":1040,"children":1043},{"href":1041,"rel":1042},"https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fsegment\u002Fconnections\u002Foauth",[1033],[1044],{"type":48,"value":1045},"Segment OAuth connections",{"type":42,"tag":253,"props":1047,"children":1048},{},[],{"type":42,"tag":43,"props":1050,"children":1052},{"id":1051},"access-tokens-client-side-sdks",[1053],{"type":48,"value":1054},"Access Tokens (Client-Side SDKs)",{"type":42,"tag":51,"props":1056,"children":1057},{},[1058],{"type":48,"value":1059},"Short-lived JWTs for authenticating browser\u002Fmobile clients. Generate server-side, pass to the client.",{"type":42,"tag":51,"props":1061,"children":1062},{},[1063],{"type":42,"tag":101,"props":1064,"children":1065},{},[1066],{"type":48,"value":369},{"type":42,"tag":371,"props":1068,"children":1070},{"className":373,"code":1069,"language":375,"meta":376,"style":376},"from twilio.jwt.access_token import AccessToken\nfrom twilio.jwt.access_token.grants import VoiceGrant\n\ntoken = AccessToken(\n    os.environ[\"TWILIO_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_API_KEY\"],\n    os.environ[\"TWILIO_API_SECRET\"],\n    identity=\"user-123\",\n    ttl=3600\n)\ntoken.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\nprint(token.to_jwt())\n",[1071],{"type":42,"tag":379,"props":1072,"children":1073},{"__ignoreMap":376},[1074,1082,1090,1097,1105,1113,1121,1128,1136,1145,1153,1162],{"type":42,"tag":383,"props":1075,"children":1076},{"class":385,"line":386},[1077],{"type":42,"tag":383,"props":1078,"children":1079},{},[1080],{"type":48,"value":1081},"from twilio.jwt.access_token import AccessToken\n",{"type":42,"tag":383,"props":1083,"children":1084},{"class":385,"line":395},[1085],{"type":42,"tag":383,"props":1086,"children":1087},{},[1088],{"type":48,"value":1089},"from twilio.jwt.access_token.grants import VoiceGrant\n",{"type":42,"tag":383,"props":1091,"children":1092},{"class":385,"line":404},[1093],{"type":42,"tag":383,"props":1094,"children":1095},{"emptyLinePlaceholder":408},[1096],{"type":48,"value":411},{"type":42,"tag":383,"props":1098,"children":1099},{"class":385,"line":414},[1100],{"type":42,"tag":383,"props":1101,"children":1102},{},[1103],{"type":48,"value":1104},"token = AccessToken(\n",{"type":42,"tag":383,"props":1106,"children":1107},{"class":385,"line":423},[1108],{"type":42,"tag":383,"props":1109,"children":1110},{},[1111],{"type":48,"value":1112},"    os.environ[\"TWILIO_ACCOUNT_SID\"],\n",{"type":42,"tag":383,"props":1114,"children":1115},{"class":385,"line":432},[1116],{"type":42,"tag":383,"props":1117,"children":1118},{},[1119],{"type":48,"value":1120},"    os.environ[\"TWILIO_API_KEY\"],\n",{"type":42,"tag":383,"props":1122,"children":1123},{"class":385,"line":441},[1124],{"type":42,"tag":383,"props":1125,"children":1126},{},[1127],{"type":48,"value":438},{"type":42,"tag":383,"props":1129,"children":1130},{"class":385,"line":450},[1131],{"type":42,"tag":383,"props":1132,"children":1133},{},[1134],{"type":48,"value":1135},"    identity=\"user-123\",\n",{"type":42,"tag":383,"props":1137,"children":1139},{"class":385,"line":1138},9,[1140],{"type":42,"tag":383,"props":1141,"children":1142},{},[1143],{"type":48,"value":1144},"    ttl=3600\n",{"type":42,"tag":383,"props":1146,"children":1148},{"class":385,"line":1147},10,[1149],{"type":42,"tag":383,"props":1150,"children":1151},{},[1152],{"type":48,"value":456},{"type":42,"tag":383,"props":1154,"children":1156},{"class":385,"line":1155},11,[1157],{"type":42,"tag":383,"props":1158,"children":1159},{},[1160],{"type":48,"value":1161},"token.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\n",{"type":42,"tag":383,"props":1163,"children":1165},{"class":385,"line":1164},12,[1166],{"type":42,"tag":383,"props":1167,"children":1168},{},[1169],{"type":48,"value":1170},"print(token.to_jwt())\n",{"type":42,"tag":51,"props":1172,"children":1173},{},[1174,1176,1182,1184,1190,1191,1197,1199],{"type":48,"value":1175},"Grant types: ",{"type":42,"tag":379,"props":1177,"children":1179},{"className":1178},[],[1180],{"type":48,"value":1181},"VoiceGrant",{"type":48,"value":1183},", ",{"type":42,"tag":379,"props":1185,"children":1187},{"className":1186},[],[1188],{"type":48,"value":1189},"VideoGrant",{"type":48,"value":1183},{"type":42,"tag":379,"props":1192,"children":1194},{"className":1193},[],[1195],{"type":48,"value":1196},"ChatGrant",{"type":48,"value":1198}," (Conversations), ",{"type":42,"tag":379,"props":1200,"children":1202},{"className":1201},[],[1203],{"type":48,"value":1204},"SyncGrant",{"type":42,"tag":253,"props":1206,"children":1207},{},[],{"type":42,"tag":43,"props":1209,"children":1211},{"id":1210},"test-credentials",[1212],{"type":48,"value":1213},"Test Credentials",{"type":42,"tag":51,"props":1215,"children":1216},{},[1217],{"type":48,"value":1218},"Make API calls without charges. Find at Console → Account → API keys & tokens → Test credentials.",{"type":42,"tag":51,"props":1220,"children":1221},{},[1222,1224,1230,1232,1238,1240,1246],{"type":48,"value":1223},"Magic numbers: ",{"type":42,"tag":379,"props":1225,"children":1227},{"className":1226},[],[1228],{"type":48,"value":1229},"+15005550006",{"type":48,"value":1231}," (valid), ",{"type":42,"tag":379,"props":1233,"children":1235},{"className":1234},[],[1236],{"type":48,"value":1237},"+15005550001",{"type":48,"value":1239}," (invalid, error 21211), ",{"type":42,"tag":379,"props":1241,"children":1243},{"className":1242},[],[1244],{"type":48,"value":1245},"+15005550007",{"type":48,"value":1247}," (no SMS, error 21612)",{"type":42,"tag":253,"props":1249,"children":1250},{},[],{"type":42,"tag":43,"props":1252,"children":1254},{"id":1253},"cannot",[1255],{"type":48,"value":1256},"CANNOT",{"type":42,"tag":208,"props":1258,"children":1259},{},[1260,1270,1280,1290,1300,1318,1328,1338,1348],{"type":42,"tag":212,"props":1261,"children":1262},{},[1263,1268],{"type":42,"tag":101,"props":1264,"children":1265},{},[1266],{"type":48,"value":1267},"Standard keys cannot access \u002FAccounts or \u002FKeys endpoints",{"type":48,"value":1269}," — Returns 20003 (401). Use Auth Token or Main key.",{"type":42,"tag":212,"props":1271,"children":1272},{},[1273,1278],{"type":42,"tag":101,"props":1274,"children":1275},{},[1276],{"type":48,"value":1277},"Cannot create restricted keys via v2010 API",{"type":48,"value":1279}," — Silently creates a standard key instead. Use v1 IAM API.",{"type":42,"tag":212,"props":1281,"children":1282},{},[1283,1288],{"type":42,"tag":101,"props":1284,"children":1285},{},[1286],{"type":48,"value":1287},"Restricted keys cannot generate Access Tokens",{"type":48,"value":1289}," — Only Standard and Main keys can.",{"type":42,"tag":212,"props":1291,"children":1292},{},[1293,1298],{"type":42,"tag":101,"props":1294,"children":1295},{},[1296],{"type":48,"value":1297},"Cannot revoke individual Access Tokens",{"type":48,"value":1299}," — Valid until expiration (max 24h). Delete the issuing API key to revoke all.",{"type":42,"tag":212,"props":1301,"children":1302},{},[1303,1316],{"type":42,"tag":101,"props":1304,"children":1305},{},[1306,1308,1314],{"type":48,"value":1307},"OAuth2 only supports ",{"type":42,"tag":379,"props":1309,"children":1311},{"className":1310},[],[1312],{"type":48,"value":1313},"client_credentials",{"type":48,"value":1315}," grant",{"type":48,"value":1317}," — No refresh tokens, no authorization code flow.",{"type":42,"tag":212,"props":1319,"children":1320},{},[1321,1326],{"type":42,"tag":101,"props":1322,"children":1323},{},[1324],{"type":48,"value":1325},"OAuth2 tokens expire after 1 hour",{"type":48,"value":1327}," — Your application must handle token refresh.",{"type":42,"tag":212,"props":1329,"children":1330},{},[1331,1336],{"type":42,"tag":101,"props":1332,"children":1333},{},[1334],{"type":48,"value":1335},"API Key Secret shown only at creation",{"type":48,"value":1337}," — Cannot be retrieved afterward.",{"type":42,"tag":212,"props":1339,"children":1340},{},[1341,1346],{"type":42,"tag":101,"props":1342,"children":1343},{},[1344],{"type":48,"value":1345},"Auth Token rotation breaks ALL API keys",{"type":48,"value":1347}," — One-way door. This is why you should use API keys from day one.",{"type":42,"tag":212,"props":1349,"children":1350},{},[1351,1356],{"type":42,"tag":101,"props":1352,"children":1353},{},[1354],{"type":48,"value":1355},"Test credentials work with only 4 endpoints",{"type":48,"value":1357}," — Messages, Calls, IncomingPhoneNumbers, Lookups. All others return 403.",{"type":42,"tag":253,"props":1359,"children":1360},{},[],{"type":42,"tag":43,"props":1362,"children":1364},{"id":1363},"next-steps",[1365],{"type":48,"value":1366},"Next Steps",{"type":42,"tag":208,"props":1368,"children":1369},{},[1370,1385,1400,1415],{"type":42,"tag":212,"props":1371,"children":1372},{},[1373,1378,1379],{"type":42,"tag":101,"props":1374,"children":1375},{},[1376],{"type":48,"value":1377},"Account setup and sub-accounts:",{"type":48,"value":1027},{"type":42,"tag":379,"props":1380,"children":1382},{"className":1381},[],[1383],{"type":48,"value":1384},"twilio-account-setup",{"type":42,"tag":212,"props":1386,"children":1387},{},[1388,1393,1394],{"type":42,"tag":101,"props":1389,"children":1390},{},[1391],{"type":48,"value":1392},"HIPAA account configuration:",{"type":48,"value":1027},{"type":42,"tag":379,"props":1395,"children":1397},{"className":1396},[],[1398],{"type":48,"value":1399},"twilio-security-compliance-hipaa",{"type":42,"tag":212,"props":1401,"children":1402},{},[1403,1408,1409],{"type":42,"tag":101,"props":1404,"children":1405},{},[1406],{"type":48,"value":1407},"Webhook signature validation:",{"type":48,"value":1027},{"type":42,"tag":379,"props":1410,"children":1412},{"className":1411},[],[1413],{"type":48,"value":1414},"twilio-webhook-architecture",{"type":42,"tag":212,"props":1416,"children":1417},{},[1418,1423,1424],{"type":42,"tag":101,"props":1419,"children":1420},{},[1421],{"type":48,"value":1422},"Credential security patterns:",{"type":48,"value":1027},{"type":42,"tag":379,"props":1425,"children":1427},{"className":1426},[],[1428],{"type":48,"value":1429},"twilio-security-hardening",{"type":42,"tag":1431,"props":1432,"children":1433},"style",{},[1434],{"type":48,"value":1435},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":1437,"total":1558},[1438,1456,1472,1484,1504,1526,1546],{"slug":1439,"name":1439,"fn":1440,"description":1441,"org":1442,"tags":1443,"stars":25,"repoUrl":26,"updatedAt":27},"accessibility-and-inclusive-visualization","make data visualizations accessible","Make data visualizations accessible and inclusive. Use when the user needs chart or diagram accessibility guidance, text alternatives for complex visuals, color and contrast review, keyboard support, reduced-motion behavior for animation or parallax, or an accessibility QA workflow for exported figures, UML-like diagrams, and dashboards.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1444,1447,1450,1453],{"name":1445,"slug":1446,"type":15},"Accessibility","accessibility",{"name":1448,"slug":1449,"type":15},"Charts","charts",{"name":1451,"slug":1452,"type":15},"Data Visualization","data-visualization",{"name":1454,"slug":1455,"type":15},"Design","design",{"slug":1457,"name":1457,"fn":1458,"description":1459,"org":1460,"tags":1461,"stars":25,"repoUrl":26,"updatedAt":1471},"agent-browser","automate browser interactions for agents","Browser automation CLI for AI agents. Use when the user needs to interact with websites, verify dev server output, test web apps, navigate pages, fill forms, click buttons, take screenshots, extract data, or automate any browser task. Also triggers when a dev server starts so you can verify it visually.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1462,1465,1468],{"name":1463,"slug":1464,"type":15},"Agents","agents",{"name":1466,"slug":1467,"type":15},"Browser Automation","browser-automation",{"name":1469,"slug":1470,"type":15},"Testing","testing","2026-04-06T18:41:03.44016",{"slug":1473,"name":1473,"fn":1474,"description":1475,"org":1476,"tags":1477,"stars":25,"repoUrl":26,"updatedAt":1483},"agent-browser-verify","verify dev server output with automated browser","Automated browser verification for dev servers. Triggers when a dev server starts to run a visual gut-check with agent-browser — verifies the page loads, checks for console errors, validates key UI elements, and reports pass\u002Ffail before continuing.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1478,1479,1482],{"name":1466,"slug":1467,"type":15},{"name":1480,"slug":1481,"type":15},"Local Development","local-development",{"name":1469,"slug":1470,"type":15},"2026-04-06T18:41:17.526867",{"slug":1485,"name":1485,"fn":1486,"description":1487,"org":1488,"tags":1489,"stars":25,"repoUrl":26,"updatedAt":1503},"agents-sdk","build AI agents on Cloudflare Workers","Build AI agents on Cloudflare Workers using the Agents SDK. Load when creating stateful agents, durable workflows, real-time WebSocket apps, scheduled tasks, MCP servers, or chat applications. Covers Agent class, state management, callable RPC, Workflows integration, and React hooks. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1490,1491,1494,1497,1500],{"name":1463,"slug":1464,"type":15},{"name":1492,"slug":1493,"type":15},"Cloudflare Workers","cloudflare-workers",{"name":1495,"slug":1496,"type":15},"SDK","sdk",{"name":1498,"slug":1499,"type":15},"Serverless","serverless",{"name":1501,"slug":1502,"type":15},"WebSockets","websockets","2026-04-06T18:39:51.717063",{"slug":1505,"name":1505,"fn":1506,"description":1507,"org":1508,"tags":1509,"stars":25,"repoUrl":26,"updatedAt":1525},"ai-elements","build chat UIs with AI Elements","AI Elements component library guidance — pre-built React components for AI interfaces built on shadcn\u002Fui. Use when building chat UIs, message displays, tool call rendering, streaming responses, reasoning panels, or any AI-native interface with the AI SDK.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1510,1513,1516,1519,1522],{"name":1511,"slug":1512,"type":15},"Frontend","frontend",{"name":1514,"slug":1515,"type":15},"React","react",{"name":1517,"slug":1518,"type":15},"shadcn\u002Fui","shadcn-ui",{"name":1520,"slug":1521,"type":15},"UI Components","ui-components",{"name":1523,"slug":1524,"type":15},"Vercel","vercel","2026-04-06T18:40:59.619419",{"slug":1527,"name":1527,"fn":1528,"description":1529,"org":1530,"tags":1531,"stars":25,"repoUrl":26,"updatedAt":1545},"ai-gateway","configure Vercel AI Gateway","Vercel AI Gateway expert guidance. Use when configuring model routing, provider failover, cost tracking, or managing multiple AI providers through a unified API.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1532,1535,1538,1541,1544],{"name":1533,"slug":1534,"type":15},"AI Infrastructure","ai-infrastructure",{"name":1536,"slug":1537,"type":15},"Cost Optimization","cost-optimization",{"name":1539,"slug":1540,"type":15},"LLM","llm",{"name":1542,"slug":1543,"type":15},"Performance","performance",{"name":1523,"slug":1524,"type":15},"2026-04-06T18:40:44.377464",{"slug":1547,"name":1547,"fn":1548,"description":1549,"org":1550,"tags":1551,"stars":25,"repoUrl":26,"updatedAt":1557},"ai-generation-persistence","implement persistence patterns for AI generations","AI generation persistence patterns — unique IDs, addressable URLs, database storage, and cost tracking for every LLM generation",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1552,1553,1556],{"name":1536,"slug":1537,"type":15},{"name":1554,"slug":1555,"type":15},"Database","database",{"name":1539,"slug":1540,"type":15},"2026-04-06T18:41:08.513425",600,{"items":1560,"total":1755},[1561,1582,1605,1622,1636,1653,1672,1684,1698,1712,1724,1739],{"slug":1562,"name":1562,"fn":1563,"description":1564,"org":1565,"tags":1566,"stars":1579,"repoUrl":1580,"updatedAt":1581},"prior-auth-packet-builder","build healthcare prior authorization packets","Build a concise prior authorization packet from local case files and payer policy docs.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1567,1570,1573,1576],{"name":1568,"slug":1569,"type":15},"Documents","documents",{"name":1571,"slug":1572,"type":15},"Healthcare","healthcare",{"name":1574,"slug":1575,"type":15},"Insurance","insurance",{"name":1577,"slug":1578,"type":15},"Regulatory Compliance","regulatory-compliance",28169,"https:\u002F\u002Fgithub.com\u002Fopenai\u002Fopenai-agents-python","2026-04-16T05:11:39.180399",{"slug":1583,"name":1583,"fn":1584,"description":1585,"org":1586,"tags":1587,"stars":1602,"repoUrl":1603,"updatedAt":1604},"aspnet-core","build ASP.NET Core web applications","Build, review, refactor, or architect ASP.NET Core web applications using current official guidance for .NET web development. Use when working on Blazor Web Apps, Razor Pages, MVC, Minimal APIs, controller-based Web APIs, SignalR, gRPC, middleware, dependency injection, configuration, authentication, authorization, testing, performance, deployment, or ASP.NET Core upgrades.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1588,1591,1593,1596,1599],{"name":1589,"slug":1590,"type":15},".NET","dotnet",{"name":1592,"slug":1583,"type":15},"ASP.NET Core",{"name":1594,"slug":1595,"type":15},"Blazor","blazor",{"name":1597,"slug":1598,"type":15},"C#","csharp",{"name":1600,"slug":1601,"type":15},"Web Development","web-development",23787,"https:\u002F\u002Fgithub.com\u002Fopenai\u002Fskills","2026-04-12T05:07:02.819491",{"slug":1606,"name":1606,"fn":1607,"description":1608,"org":1609,"tags":1610,"stars":1602,"repoUrl":1603,"updatedAt":1621},"chatgpt-apps","build ChatGPT Apps SDK applications","Build, scaffold, refactor, and troubleshoot ChatGPT Apps SDK applications that combine an MCP server and widget UI. Use when Codex needs to design tools, register UI resources, wire the MCP Apps bridge or ChatGPT compatibility APIs, apply Apps SDK metadata or CSP or domain settings, or produce a docs-aligned project scaffold. Prefer a docs-first workflow by invoking the openai-docs skill or OpenAI developer docs MCP tools before generating code.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1611,1614,1617,1620],{"name":1612,"slug":1613,"type":15},"Apps SDK","apps-sdk",{"name":1615,"slug":1616,"type":15},"ChatGPT","chatgpt",{"name":1618,"slug":1619,"type":15},"MCP","mcp",{"name":9,"slug":8,"type":15},"2026-04-12T05:07:05.468097",{"slug":1623,"name":1623,"fn":1624,"description":1625,"org":1626,"tags":1627,"stars":1602,"repoUrl":1603,"updatedAt":1635},"cli-creator","build CLIs from API docs","Build a composable CLI for Codex from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local script. Use when the user wants Codex to create a command-line tool that can run from any repo, expose composable read\u002Fwrite commands, return stable JSON, manage auth, and pair with a companion skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1628,1629,1632],{"name":20,"slug":21,"type":15},{"name":1630,"slug":1631,"type":15},"CLI","cli",{"name":1633,"slug":1634,"type":15},"Codex","codex","2026-04-12T05:07:04.132762",{"slug":1637,"name":1637,"fn":1638,"description":1639,"org":1640,"tags":1641,"stars":1602,"repoUrl":1603,"updatedAt":1652},"cloudflare-deploy","deploy projects to Cloudflare","Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1642,1645,1648,1649],{"name":1643,"slug":1644,"type":15},"Cloudflare","cloudflare",{"name":1646,"slug":1647,"type":15},"Cloudflare Pages","cloudflare-pages",{"name":1492,"slug":1493,"type":15},{"name":1650,"slug":1651,"type":15},"Deployment","deployment","2026-04-12T05:07:14.275118",{"slug":1654,"name":1654,"fn":1655,"description":1656,"org":1657,"tags":1658,"stars":1602,"repoUrl":1603,"updatedAt":1671},"define-goal","define and set measurable project goals","Help the user define a concrete, measurable goal before starting work, especially when they ask to use the goal tool, create a goal, set an objective, clarify success criteria, or turn a fuzzy intention into a quantitative outcome. Use this skill for goal creation and goal refinement only; it does not manage durable snapshots, decision logs, or long-running execution artifacts.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1659,1662,1665,1668],{"name":1660,"slug":1661,"type":15},"Productivity","productivity",{"name":1663,"slug":1664,"type":15},"Project Management","project-management",{"name":1666,"slug":1667,"type":15},"Strategy","strategy",{"name":1669,"slug":1670,"type":15},"Task Management","task-management","2026-05-23T06:17:16.870838",{"slug":1673,"name":1673,"fn":1674,"description":1675,"org":1676,"tags":1677,"stars":1602,"repoUrl":1603,"updatedAt":1683},"figma","translate Figma designs into code","Use the Figma MCP server to fetch design context, screenshots, variables, and assets from Figma, and to translate Figma nodes into production code. Trigger when a task involves Figma URLs, node IDs, design-to-code implementation, or Figma MCP setup and troubleshooting.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1678,1679,1681,1682],{"name":1454,"slug":1455,"type":15},{"name":1680,"slug":1673,"type":15},"Figma",{"name":1511,"slug":1512,"type":15},{"name":1618,"slug":1619,"type":15},"2026-04-12T05:06:47.939943",{"slug":1685,"name":1685,"fn":1686,"description":1687,"org":1688,"tags":1689,"stars":1602,"repoUrl":1603,"updatedAt":1697},"figma-code-connect-components","connect Figma designs to code components","Connects Figma design components to code components using Code Connect mapping tools. Use when user says \"code connect\", \"connect this component to code\", \"map this component\", \"link component to code\", \"create code connect mapping\", or wants to establish mappings between Figma designs and code implementations. For canvas writes via `use_figma`, use `figma-use`.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1690,1691,1694,1695,1696],{"name":1454,"slug":1455,"type":15},{"name":1692,"slug":1693,"type":15},"Design System","design-system",{"name":1680,"slug":1673,"type":15},{"name":1511,"slug":1512,"type":15},{"name":1520,"slug":1521,"type":15},"2026-05-10T05:59:52.971881",{"slug":1699,"name":1699,"fn":1700,"description":1701,"org":1702,"tags":1703,"stars":1602,"repoUrl":1603,"updatedAt":1711},"figma-create-design-system-rules","generate design system rules from Figma","Generates custom design system rules for the user's codebase. Use when user says \"create design system rules\", \"generate rules for my project\", \"set up design rules\", \"customize design system guidelines\", or wants to establish project-specific conventions for Figma-to-code workflows. Requires Figma MCP server connection.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1704,1705,1706,1709,1710],{"name":1454,"slug":1455,"type":15},{"name":1692,"slug":1693,"type":15},{"name":1707,"slug":1708,"type":15},"Documentation","documentation",{"name":1680,"slug":1673,"type":15},{"name":1511,"slug":1512,"type":15},"2026-05-16T06:07:47.821474",{"slug":1713,"name":1713,"fn":1714,"description":1715,"org":1716,"tags":1717,"stars":1602,"repoUrl":1603,"updatedAt":1723},"figma-implement-design","translate Figma designs into application code","Translates Figma designs into production-ready application code with 1:1 visual fidelity. Use when implementing UI code from Figma files, when user mentions \"implement design\", \"generate code\", \"implement component\", provides Figma URLs, or asks to build components matching Figma specs. For Figma canvas writes via `use_figma`, use `figma-use`.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1718,1719,1720,1721,1722],{"name":1454,"slug":1455,"type":15},{"name":1680,"slug":1673,"type":15},{"name":1511,"slug":1512,"type":15},{"name":1520,"slug":1521,"type":15},{"name":1600,"slug":1601,"type":15},"2026-05-16T06:07:40.583615",{"slug":1725,"name":1725,"fn":1726,"description":1727,"org":1728,"tags":1729,"stars":1602,"repoUrl":1603,"updatedAt":1738},"hatch-pet","create animated pets for Codex","Create, repair, validate, visually QA, and package Codex-compatible animated pets and pet spritesheets from character art, generated images, company or prospect brand cues, or visual references. Use when a user wants a lightweight-worker Codex pet workflow, a non-pixel custom pet style, a prospect or company mascot pet, or a full 8x9 animated pet atlas with transparent unused cells, QA contact sheets, and pet.json packaging. This skill composes the installed $imagegen system skill for visual generation and uses bundled scripts for deterministic spritesheet assembly.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1730,1733,1734,1737],{"name":1731,"slug":1732,"type":15},"Animation","animation",{"name":1633,"slug":1634,"type":15},{"name":1735,"slug":1736,"type":15},"Creative","creative",{"name":1454,"slug":1455,"type":15},"2026-05-02T05:31:48.48485",{"slug":1740,"name":1740,"fn":1741,"description":1742,"org":1743,"tags":1744,"stars":1602,"repoUrl":1603,"updatedAt":1754},"imagegen","generate and edit raster images","Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output should be a bitmap asset rather than repo-native code or vector. Do not use when the task is better handled by editing existing SVG\u002Fvector\u002Fcode-native assets, extending an established icon or logo system, or building the visual directly in HTML\u002FCSS\u002Fcanvas.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1745,1746,1747,1750,1753],{"name":1735,"slug":1736,"type":15},{"name":1454,"slug":1455,"type":15},{"name":1748,"slug":1749,"type":15},"Image Generation","image-generation",{"name":1751,"slug":1752,"type":15},"Images","images",{"name":9,"slug":8,"type":15},"2026-05-15T06:23:24.312127",675]