[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-twilio-twilio-security-api-auth":3,"mdc--u1ufxx-key":33,"related-repo-twilio-twilio-security-api-auth":1440,"related-org-twilio-twilio-security-api-auth":1549},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":23,"repoUrl":24,"updatedAt":25,"license":26,"forks":27,"topics":28,"repo":29,"sourceUrl":31,"mdContent":32},"twilio-security-api-auth","implement Twilio API authentication methods","Choose the right Twilio authentication method and implement it correctly. Covers Auth Token (testing only), API Keys (production standard), OAuth2 client_credentials (time-limited bearer tokens), Access Tokens (client-side SDKs), and test credentials. Use this skill before making any Twilio API calls in production.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"twilio","Twilio","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Ftwilio.png",[12,16,19,22],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Auth","auth",{"name":20,"slug":21,"type":15},"OAuth","oauth",{"name":9,"slug":8,"type":15},25,"https:\u002F\u002Fgithub.com\u002Ftwilio\u002Fai","2026-07-17T06:05:56.197226",null,7,[],{"repoUrl":24,"stars":23,"forks":27,"topics":30,"description":26},[],"https:\u002F\u002Fgithub.com\u002Ftwilio\u002Fai\u002Ftree\u002FHEAD\u002Fskills\u002Ftwilio\u002Ftwilio-security-api-auth","---\nname: twilio-security-api-auth\ndescription: >\n  Choose the right Twilio authentication method and implement it correctly.\n  Covers Auth Token (testing only), API Keys (production standard), OAuth2\n  client_credentials (time-limited bearer tokens), Access Tokens (client-side\n  SDKs), and test credentials. Use this skill before making any Twilio API\n  calls in production.\n---\n\n## Overview\n\nTwilio supports four authentication methods. Choosing the wrong one is a security risk — Auth Tokens in production code are the most common credential leak.\n\n| Method | Use for | Token lifetime | Revocable individually |\n|--------|---------|---------------|----------------------|\n| **Auth Token** | Local testing only | Permanent (until rotated) | No — rotation invalidates all integrations using that token and breaks webhook signature validation; API keys (SK-prefixed) are unaffected |\n| **API Key + Secret** | Production server-side | Permanent (until deleted) | Yes |\n| **OAuth2 Bearer Token** | Production server-side (enhanced) | 1 hour | Expires automatically |\n| **Access Token (JWT)** | Client-side SDKs (Voice, Video, Chat) | Up to 24 hours | No — delete issuing API key |\n\n**Decision framework:**\n- **Building a quick prototype?** → Auth Token (but switch to API Key before deploying)\n- **Production server-side code?** → API Key + Secret (simplest production auth) or OAuth2 (time-limited tokens)\n- **Browser\u002Fmobile client needs to connect?** → Access Token (JWT) generated server-side\n- **Running tests without charges?** → Test credentials with magic numbers\n\n---\n\n## API Key Authentication (Production Standard)\n\n**Create:** Console → Account → API keys & tokens → Create API key\n\n| Key type | Access | Create via |\n|----------|--------|-----------|\n| **Main** | Full account access | Console only |\n| **Standard** | All resources except \u002FAccounts and \u002FKeys endpoints | Console or API |\n| **Restricted** | Specific resources only (up to 100 permissions) | Console or v1 IAM API only |\n\n**Python**\n```python\nimport os\nfrom twilio.rest import Client\n\nclient = Client(\n    os.environ[\"TWILIO_API_KEY\"],      # SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n    os.environ[\"TWILIO_API_SECRET\"],\n    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n)\n```\n\n**Node.js**\n```node\nconst client = require(\"twilio\")(\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n);\n```\n\n---\n\n## OAuth2 Authentication (Client Credentials)\n\nTime-limited bearer tokens that expire after 1 hour. More secure than permanent API keys for server-to-server communication.\n\n### Step 1 — Create an OAuth App\n\nCreate an OAuth App in the Twilio Console to get a Client ID and Client Secret.\n\n### Step 2 — Request a Bearer Token\n\n**cURL**\n```bash\ncurl -X POST 'https:\u002F\u002Foauth.twilio.com\u002Fv2\u002Ftoken' \\\n  -H 'Content-Type: application\u002Fx-www-form-urlencoded' \\\n  -d 'client_id={ClientID}' \\\n  -d 'client_secret={ClientSecret}' \\\n  -d 'grant_type=client_credentials'\n```\n\n**Response:**\n```json\n{\n    \"access_token\": \"{BearerToken}\",\n    \"token_type\": \"Bearer\",\n    \"expires_in\": 3600\n}\n```\n\n### Step 3 — Use the Bearer Token\n\n```bash\ncurl 'https:\u002F\u002Fapi.twilio.com\u002F2010-04-01\u002FAccounts\u002F{AccountSID}\u002FMessages.json' \\\n  -H 'Authorization: Bearer {BearerToken}'\n```\n\n### SDK Support\n\nOAuth2 is supported in all Twilio SDKs:\n\n| Language | Minimum version |\n|----------|----------------|\n| Java | 10.6.0 |\n| C#\u002F.NET | 7.6.0 |\n| Node.js | 5.4.0 |\n| Python | 9.4.1 |\n| Ruby | 7.4.0 |\n| PHP | 8.5.0 |\n| Go | 1.25.1 |\n\n**Docs:** [OAuth access tokens](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Foauth-apps\u002Foauth-access-token) | [Segment OAuth connections](https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fsegment\u002Fconnections\u002Foauth)\n\n---\n\n## Access Tokens (Client-Side SDKs)\n\nShort-lived JWTs for authenticating browser\u002Fmobile clients. Generate server-side, pass to the client.\n\n**Python**\n```python\nfrom twilio.jwt.access_token import AccessToken\nfrom twilio.jwt.access_token.grants import VoiceGrant\n\ntoken = AccessToken(\n    os.environ[\"TWILIO_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_API_KEY\"],\n    os.environ[\"TWILIO_API_SECRET\"],\n    identity=\"user-123\",\n    ttl=3600\n)\ntoken.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\nprint(token.to_jwt())\n```\n\nGrant types: `VoiceGrant`, `VideoGrant`, `ChatGrant` (Conversations), `SyncGrant`\n\n---\n\n## Test Credentials\n\nMake API calls without charges. Find at Console → Account → API keys & tokens → Test credentials.\n\nMagic numbers: `+15005550006` (valid), `+15005550001` (invalid, error 21211), `+15005550007` (no SMS, error 21612)\n\n---\n\n## CANNOT\n\n- **Standard keys cannot access \u002FAccounts or \u002FKeys endpoints** — Returns 20003 (401). Use Auth Token or Main key.\n- **Cannot create restricted keys via v2010 API** — Silently creates a standard key instead. Use v1 IAM API.\n- **Restricted keys cannot generate Access Tokens** — Only Standard and Main keys can.\n- **Cannot revoke individual Access Tokens** — Valid until expiration (max 24h). Delete the issuing API key to revoke all.\n- **OAuth2 only supports `client_credentials` grant** — No refresh tokens, no authorization code flow.\n- **OAuth2 tokens expire after 1 hour** — Your application must handle token refresh.\n- **API Key Secret shown only at creation** — Cannot be retrieved afterward.\n- **Auth Token rotation does not affect API keys** — It invalidates all integrations using `AccountSID:AuthToken` and breaks webhook signature validation, but API keys (SK-prefixed) are independent and unaffected. This is why API keys are recommended for production from day one.\n- **Test credentials work with only 4 endpoints** — Messages, Calls, IncomingPhoneNumbers, Lookups. All others return 403.\n\n---\n\n## Next Steps\n\n- **Account setup and sub-accounts:** `twilio-account-setup`\n- **HIPAA account configuration:** `twilio-security-compliance-hipaa`\n- **Webhook signature validation:** `twilio-webhook-architecture`\n- **Credential security patterns:** `twilio-security-hardening`\n",{"data":34,"body":35},{"name":4,"description":6},{"type":36,"children":37},"root",[38,47,53,196,204,249,253,259,269,359,367,453,461,510,513,519,524,531,536,542,550,696,704,835,841,892,898,903,1014,1042,1045,1051,1056,1063,1167,1201,1204,1210,1215,1244,1247,1253,1362,1365,1371,1434],{"type":39,"tag":40,"props":41,"children":43},"element","h2",{"id":42},"overview",[44],{"type":45,"value":46},"text","Overview",{"type":39,"tag":48,"props":49,"children":50},"p",{},[51],{"type":45,"value":52},"Twilio supports four authentication methods. Choosing the wrong one is a security risk — Auth Tokens in production code are the most common credential leak.",{"type":39,"tag":54,"props":55,"children":56},"table",{},[57,86],{"type":39,"tag":58,"props":59,"children":60},"thead",{},[61],{"type":39,"tag":62,"props":63,"children":64},"tr",{},[65,71,76,81],{"type":39,"tag":66,"props":67,"children":68},"th",{},[69],{"type":45,"value":70},"Method",{"type":39,"tag":66,"props":72,"children":73},{},[74],{"type":45,"value":75},"Use for",{"type":39,"tag":66,"props":77,"children":78},{},[79],{"type":45,"value":80},"Token lifetime",{"type":39,"tag":66,"props":82,"children":83},{},[84],{"type":45,"value":85},"Revocable individually",{"type":39,"tag":87,"props":88,"children":89},"tbody",{},[90,118,144,170],{"type":39,"tag":62,"props":91,"children":92},{},[93,103,108,113],{"type":39,"tag":94,"props":95,"children":96},"td",{},[97],{"type":39,"tag":98,"props":99,"children":100},"strong",{},[101],{"type":45,"value":102},"Auth Token",{"type":39,"tag":94,"props":104,"children":105},{},[106],{"type":45,"value":107},"Local testing only",{"type":39,"tag":94,"props":109,"children":110},{},[111],{"type":45,"value":112},"Permanent (until rotated)",{"type":39,"tag":94,"props":114,"children":115},{},[116],{"type":45,"value":117},"No — rotation invalidates all integrations using that token and breaks webhook signature validation; API keys (SK-prefixed) are unaffected",{"type":39,"tag":62,"props":119,"children":120},{},[121,129,134,139],{"type":39,"tag":94,"props":122,"children":123},{},[124],{"type":39,"tag":98,"props":125,"children":126},{},[127],{"type":45,"value":128},"API Key + Secret",{"type":39,"tag":94,"props":130,"children":131},{},[132],{"type":45,"value":133},"Production server-side",{"type":39,"tag":94,"props":135,"children":136},{},[137],{"type":45,"value":138},"Permanent (until deleted)",{"type":39,"tag":94,"props":140,"children":141},{},[142],{"type":45,"value":143},"Yes",{"type":39,"tag":62,"props":145,"children":146},{},[147,155,160,165],{"type":39,"tag":94,"props":148,"children":149},{},[150],{"type":39,"tag":98,"props":151,"children":152},{},[153],{"type":45,"value":154},"OAuth2 Bearer Token",{"type":39,"tag":94,"props":156,"children":157},{},[158],{"type":45,"value":159},"Production server-side (enhanced)",{"type":39,"tag":94,"props":161,"children":162},{},[163],{"type":45,"value":164},"1 hour",{"type":39,"tag":94,"props":166,"children":167},{},[168],{"type":45,"value":169},"Expires automatically",{"type":39,"tag":62,"props":171,"children":172},{},[173,181,186,191],{"type":39,"tag":94,"props":174,"children":175},{},[176],{"type":39,"tag":98,"props":177,"children":178},{},[179],{"type":45,"value":180},"Access Token (JWT)",{"type":39,"tag":94,"props":182,"children":183},{},[184],{"type":45,"value":185},"Client-side SDKs (Voice, Video, Chat)",{"type":39,"tag":94,"props":187,"children":188},{},[189],{"type":45,"value":190},"Up to 24 hours",{"type":39,"tag":94,"props":192,"children":193},{},[194],{"type":45,"value":195},"No — delete issuing API key",{"type":39,"tag":48,"props":197,"children":198},{},[199],{"type":39,"tag":98,"props":200,"children":201},{},[202],{"type":45,"value":203},"Decision framework:",{"type":39,"tag":205,"props":206,"children":207},"ul",{},[208,219,229,239],{"type":39,"tag":209,"props":210,"children":211},"li",{},[212,217],{"type":39,"tag":98,"props":213,"children":214},{},[215],{"type":45,"value":216},"Building a quick prototype?",{"type":45,"value":218}," → Auth Token (but switch to API Key before deploying)",{"type":39,"tag":209,"props":220,"children":221},{},[222,227],{"type":39,"tag":98,"props":223,"children":224},{},[225],{"type":45,"value":226},"Production server-side code?",{"type":45,"value":228}," → API Key + Secret (simplest production auth) or OAuth2 (time-limited tokens)",{"type":39,"tag":209,"props":230,"children":231},{},[232,237],{"type":39,"tag":98,"props":233,"children":234},{},[235],{"type":45,"value":236},"Browser\u002Fmobile client needs to connect?",{"type":45,"value":238}," → Access Token (JWT) generated server-side",{"type":39,"tag":209,"props":240,"children":241},{},[242,247],{"type":39,"tag":98,"props":243,"children":244},{},[245],{"type":45,"value":246},"Running tests without charges?",{"type":45,"value":248}," → Test credentials with magic numbers",{"type":39,"tag":250,"props":251,"children":252},"hr",{},[],{"type":39,"tag":40,"props":254,"children":256},{"id":255},"api-key-authentication-production-standard",[257],{"type":45,"value":258},"API Key Authentication (Production Standard)",{"type":39,"tag":48,"props":260,"children":261},{},[262,267],{"type":39,"tag":98,"props":263,"children":264},{},[265],{"type":45,"value":266},"Create:",{"type":45,"value":268}," Console → Account → API keys & tokens → Create API key",{"type":39,"tag":54,"props":270,"children":271},{},[272,293],{"type":39,"tag":58,"props":273,"children":274},{},[275],{"type":39,"tag":62,"props":276,"children":277},{},[278,283,288],{"type":39,"tag":66,"props":279,"children":280},{},[281],{"type":45,"value":282},"Key type",{"type":39,"tag":66,"props":284,"children":285},{},[286],{"type":45,"value":287},"Access",{"type":39,"tag":66,"props":289,"children":290},{},[291],{"type":45,"value":292},"Create via",{"type":39,"tag":87,"props":294,"children":295},{},[296,317,338],{"type":39,"tag":62,"props":297,"children":298},{},[299,307,312],{"type":39,"tag":94,"props":300,"children":301},{},[302],{"type":39,"tag":98,"props":303,"children":304},{},[305],{"type":45,"value":306},"Main",{"type":39,"tag":94,"props":308,"children":309},{},[310],{"type":45,"value":311},"Full account access",{"type":39,"tag":94,"props":313,"children":314},{},[315],{"type":45,"value":316},"Console only",{"type":39,"tag":62,"props":318,"children":319},{},[320,328,333],{"type":39,"tag":94,"props":321,"children":322},{},[323],{"type":39,"tag":98,"props":324,"children":325},{},[326],{"type":45,"value":327},"Standard",{"type":39,"tag":94,"props":329,"children":330},{},[331],{"type":45,"value":332},"All resources except \u002FAccounts and \u002FKeys endpoints",{"type":39,"tag":94,"props":334,"children":335},{},[336],{"type":45,"value":337},"Console or API",{"type":39,"tag":62,"props":339,"children":340},{},[341,349,354],{"type":39,"tag":94,"props":342,"children":343},{},[344],{"type":39,"tag":98,"props":345,"children":346},{},[347],{"type":45,"value":348},"Restricted",{"type":39,"tag":94,"props":350,"children":351},{},[352],{"type":45,"value":353},"Specific resources only (up to 100 permissions)",{"type":39,"tag":94,"props":355,"children":356},{},[357],{"type":45,"value":358},"Console or v1 IAM API only",{"type":39,"tag":48,"props":360,"children":361},{},[362],{"type":39,"tag":98,"props":363,"children":364},{},[365],{"type":45,"value":366},"Python",{"type":39,"tag":368,"props":369,"children":374},"pre",{"className":370,"code":371,"language":372,"meta":373,"style":373},"language-python shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import os\nfrom twilio.rest import Client\n\nclient = Client(\n    os.environ[\"TWILIO_API_KEY\"],      # SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n    os.environ[\"TWILIO_API_SECRET\"],\n    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n)\n","python","",[375],{"type":39,"tag":376,"props":377,"children":378},"code",{"__ignoreMap":373},[379,390,399,409,418,427,436,444],{"type":39,"tag":380,"props":381,"children":384},"span",{"class":382,"line":383},"line",1,[385],{"type":39,"tag":380,"props":386,"children":387},{},[388],{"type":45,"value":389},"import os\n",{"type":39,"tag":380,"props":391,"children":393},{"class":382,"line":392},2,[394],{"type":39,"tag":380,"props":395,"children":396},{},[397],{"type":45,"value":398},"from twilio.rest import Client\n",{"type":39,"tag":380,"props":400,"children":402},{"class":382,"line":401},3,[403],{"type":39,"tag":380,"props":404,"children":406},{"emptyLinePlaceholder":405},true,[407],{"type":45,"value":408},"\n",{"type":39,"tag":380,"props":410,"children":412},{"class":382,"line":411},4,[413],{"type":39,"tag":380,"props":414,"children":415},{},[416],{"type":45,"value":417},"client = Client(\n",{"type":39,"tag":380,"props":419,"children":421},{"class":382,"line":420},5,[422],{"type":39,"tag":380,"props":423,"children":424},{},[425],{"type":45,"value":426},"    os.environ[\"TWILIO_API_KEY\"],      # SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n",{"type":39,"tag":380,"props":428,"children":430},{"class":382,"line":429},6,[431],{"type":39,"tag":380,"props":432,"children":433},{},[434],{"type":45,"value":435},"    os.environ[\"TWILIO_API_SECRET\"],\n",{"type":39,"tag":380,"props":437,"children":438},{"class":382,"line":27},[439],{"type":39,"tag":380,"props":440,"children":441},{},[442],{"type":45,"value":443},"    os.environ[\"TWILIO_ACCOUNT_SID\"]   # required as third argument\n",{"type":39,"tag":380,"props":445,"children":447},{"class":382,"line":446},8,[448],{"type":39,"tag":380,"props":449,"children":450},{},[451],{"type":45,"value":452},")\n",{"type":39,"tag":48,"props":454,"children":455},{},[456],{"type":39,"tag":98,"props":457,"children":458},{},[459],{"type":45,"value":460},"Node.js",{"type":39,"tag":368,"props":462,"children":466},{"className":463,"code":464,"language":465,"meta":373,"style":373},"language-node shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","const client = require(\"twilio\")(\n    process.env.TWILIO_API_KEY,\n    process.env.TWILIO_API_SECRET,\n    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n);\n","node",[467],{"type":39,"tag":376,"props":468,"children":469},{"__ignoreMap":373},[470,478,486,494,502],{"type":39,"tag":380,"props":471,"children":472},{"class":382,"line":383},[473],{"type":39,"tag":380,"props":474,"children":475},{},[476],{"type":45,"value":477},"const client = require(\"twilio\")(\n",{"type":39,"tag":380,"props":479,"children":480},{"class":382,"line":392},[481],{"type":39,"tag":380,"props":482,"children":483},{},[484],{"type":45,"value":485},"    process.env.TWILIO_API_KEY,\n",{"type":39,"tag":380,"props":487,"children":488},{"class":382,"line":401},[489],{"type":39,"tag":380,"props":490,"children":491},{},[492],{"type":45,"value":493},"    process.env.TWILIO_API_SECRET,\n",{"type":39,"tag":380,"props":495,"children":496},{"class":382,"line":411},[497],{"type":39,"tag":380,"props":498,"children":499},{},[500],{"type":45,"value":501},"    { accountSid: process.env.TWILIO_ACCOUNT_SID }\n",{"type":39,"tag":380,"props":503,"children":504},{"class":382,"line":420},[505],{"type":39,"tag":380,"props":506,"children":507},{},[508],{"type":45,"value":509},");\n",{"type":39,"tag":250,"props":511,"children":512},{},[],{"type":39,"tag":40,"props":514,"children":516},{"id":515},"oauth2-authentication-client-credentials",[517],{"type":45,"value":518},"OAuth2 Authentication (Client Credentials)",{"type":39,"tag":48,"props":520,"children":521},{},[522],{"type":45,"value":523},"Time-limited bearer tokens that expire after 1 hour. More secure than permanent API keys for server-to-server communication.",{"type":39,"tag":525,"props":526,"children":528},"h3",{"id":527},"step-1-create-an-oauth-app",[529],{"type":45,"value":530},"Step 1 — Create an OAuth App",{"type":39,"tag":48,"props":532,"children":533},{},[534],{"type":45,"value":535},"Create an OAuth App in the Twilio Console to get a Client ID and Client Secret.",{"type":39,"tag":525,"props":537,"children":539},{"id":538},"step-2-request-a-bearer-token",[540],{"type":45,"value":541},"Step 2 — Request a Bearer Token",{"type":39,"tag":48,"props":543,"children":544},{},[545],{"type":39,"tag":98,"props":546,"children":547},{},[548],{"type":45,"value":549},"cURL",{"type":39,"tag":368,"props":551,"children":555},{"className":552,"code":553,"language":554,"meta":373,"style":373},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","curl -X POST 'https:\u002F\u002Foauth.twilio.com\u002Fv2\u002Ftoken' \\\n  -H 'Content-Type: application\u002Fx-www-form-urlencoded' \\\n  -d 'client_id={ClientID}' \\\n  -d 'client_secret={ClientSecret}' \\\n  -d 'grant_type=client_credentials'\n","bash",[556],{"type":39,"tag":376,"props":557,"children":558},{"__ignoreMap":373},[559,601,626,651,675],{"type":39,"tag":380,"props":560,"children":561},{"class":382,"line":383},[562,568,574,579,585,590,595],{"type":39,"tag":380,"props":563,"children":565},{"style":564},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[566],{"type":45,"value":567},"curl",{"type":39,"tag":380,"props":569,"children":571},{"style":570},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[572],{"type":45,"value":573}," -X",{"type":39,"tag":380,"props":575,"children":576},{"style":570},[577],{"type":45,"value":578}," POST",{"type":39,"tag":380,"props":580,"children":582},{"style":581},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[583],{"type":45,"value":584}," '",{"type":39,"tag":380,"props":586,"children":587},{"style":570},[588],{"type":45,"value":589},"https:\u002F\u002Foauth.twilio.com\u002Fv2\u002Ftoken",{"type":39,"tag":380,"props":591,"children":592},{"style":581},[593],{"type":45,"value":594},"'",{"type":39,"tag":380,"props":596,"children":598},{"style":597},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[599],{"type":45,"value":600}," \\\n",{"type":39,"tag":380,"props":602,"children":603},{"class":382,"line":392},[604,609,613,618,622],{"type":39,"tag":380,"props":605,"children":606},{"style":570},[607],{"type":45,"value":608},"  -H",{"type":39,"tag":380,"props":610,"children":611},{"style":581},[612],{"type":45,"value":584},{"type":39,"tag":380,"props":614,"children":615},{"style":570},[616],{"type":45,"value":617},"Content-Type: application\u002Fx-www-form-urlencoded",{"type":39,"tag":380,"props":619,"children":620},{"style":581},[621],{"type":45,"value":594},{"type":39,"tag":380,"props":623,"children":624},{"style":597},[625],{"type":45,"value":600},{"type":39,"tag":380,"props":627,"children":628},{"class":382,"line":401},[629,634,638,643,647],{"type":39,"tag":380,"props":630,"children":631},{"style":570},[632],{"type":45,"value":633},"  -d",{"type":39,"tag":380,"props":635,"children":636},{"style":581},[637],{"type":45,"value":584},{"type":39,"tag":380,"props":639,"children":640},{"style":570},[641],{"type":45,"value":642},"client_id={ClientID}",{"type":39,"tag":380,"props":644,"children":645},{"style":581},[646],{"type":45,"value":594},{"type":39,"tag":380,"props":648,"children":649},{"style":597},[650],{"type":45,"value":600},{"type":39,"tag":380,"props":652,"children":653},{"class":382,"line":411},[654,658,662,667,671],{"type":39,"tag":380,"props":655,"children":656},{"style":570},[657],{"type":45,"value":633},{"type":39,"tag":380,"props":659,"children":660},{"style":581},[661],{"type":45,"value":584},{"type":39,"tag":380,"props":663,"children":664},{"style":570},[665],{"type":45,"value":666},"client_secret={ClientSecret}",{"type":39,"tag":380,"props":668,"children":669},{"style":581},[670],{"type":45,"value":594},{"type":39,"tag":380,"props":672,"children":673},{"style":597},[674],{"type":45,"value":600},{"type":39,"tag":380,"props":676,"children":677},{"class":382,"line":420},[678,682,686,691],{"type":39,"tag":380,"props":679,"children":680},{"style":570},[681],{"type":45,"value":633},{"type":39,"tag":380,"props":683,"children":684},{"style":581},[685],{"type":45,"value":584},{"type":39,"tag":380,"props":687,"children":688},{"style":570},[689],{"type":45,"value":690},"grant_type=client_credentials",{"type":39,"tag":380,"props":692,"children":693},{"style":581},[694],{"type":45,"value":695},"'\n",{"type":39,"tag":48,"props":697,"children":698},{},[699],{"type":39,"tag":98,"props":700,"children":701},{},[702],{"type":45,"value":703},"Response:",{"type":39,"tag":368,"props":705,"children":709},{"className":706,"code":707,"language":708,"meta":373,"style":373},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n    \"access_token\": \"{BearerToken}\",\n    \"token_type\": \"Bearer\",\n    \"expires_in\": 3600\n}\n","json",[710],{"type":39,"tag":376,"props":711,"children":712},{"__ignoreMap":373},[713,721,764,801,827],{"type":39,"tag":380,"props":714,"children":715},{"class":382,"line":383},[716],{"type":39,"tag":380,"props":717,"children":718},{"style":581},[719],{"type":45,"value":720},"{\n",{"type":39,"tag":380,"props":722,"children":723},{"class":382,"line":392},[724,729,735,740,745,750,755,759],{"type":39,"tag":380,"props":725,"children":726},{"style":581},[727],{"type":45,"value":728},"    \"",{"type":39,"tag":380,"props":730,"children":732},{"style":731},"--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA",[733],{"type":45,"value":734},"access_token",{"type":39,"tag":380,"props":736,"children":737},{"style":581},[738],{"type":45,"value":739},"\"",{"type":39,"tag":380,"props":741,"children":742},{"style":581},[743],{"type":45,"value":744},":",{"type":39,"tag":380,"props":746,"children":747},{"style":581},[748],{"type":45,"value":749}," \"",{"type":39,"tag":380,"props":751,"children":752},{"style":570},[753],{"type":45,"value":754},"{BearerToken}",{"type":39,"tag":380,"props":756,"children":757},{"style":581},[758],{"type":45,"value":739},{"type":39,"tag":380,"props":760,"children":761},{"style":581},[762],{"type":45,"value":763},",\n",{"type":39,"tag":380,"props":765,"children":766},{"class":382,"line":401},[767,771,776,780,784,788,793,797],{"type":39,"tag":380,"props":768,"children":769},{"style":581},[770],{"type":45,"value":728},{"type":39,"tag":380,"props":772,"children":773},{"style":731},[774],{"type":45,"value":775},"token_type",{"type":39,"tag":380,"props":777,"children":778},{"style":581},[779],{"type":45,"value":739},{"type":39,"tag":380,"props":781,"children":782},{"style":581},[783],{"type":45,"value":744},{"type":39,"tag":380,"props":785,"children":786},{"style":581},[787],{"type":45,"value":749},{"type":39,"tag":380,"props":789,"children":790},{"style":570},[791],{"type":45,"value":792},"Bearer",{"type":39,"tag":380,"props":794,"children":795},{"style":581},[796],{"type":45,"value":739},{"type":39,"tag":380,"props":798,"children":799},{"style":581},[800],{"type":45,"value":763},{"type":39,"tag":380,"props":802,"children":803},{"class":382,"line":411},[804,808,813,817,821],{"type":39,"tag":380,"props":805,"children":806},{"style":581},[807],{"type":45,"value":728},{"type":39,"tag":380,"props":809,"children":810},{"style":731},[811],{"type":45,"value":812},"expires_in",{"type":39,"tag":380,"props":814,"children":815},{"style":581},[816],{"type":45,"value":739},{"type":39,"tag":380,"props":818,"children":819},{"style":581},[820],{"type":45,"value":744},{"type":39,"tag":380,"props":822,"children":824},{"style":823},"--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C",[825],{"type":45,"value":826}," 3600\n",{"type":39,"tag":380,"props":828,"children":829},{"class":382,"line":420},[830],{"type":39,"tag":380,"props":831,"children":832},{"style":581},[833],{"type":45,"value":834},"}\n",{"type":39,"tag":525,"props":836,"children":838},{"id":837},"step-3-use-the-bearer-token",[839],{"type":45,"value":840},"Step 3 — Use the Bearer Token",{"type":39,"tag":368,"props":842,"children":844},{"className":552,"code":843,"language":554,"meta":373,"style":373},"curl 'https:\u002F\u002Fapi.twilio.com\u002F2010-04-01\u002FAccounts\u002F{AccountSID}\u002FMessages.json' \\\n  -H 'Authorization: Bearer {BearerToken}'\n",[845],{"type":39,"tag":376,"props":846,"children":847},{"__ignoreMap":373},[848,872],{"type":39,"tag":380,"props":849,"children":850},{"class":382,"line":383},[851,855,859,864,868],{"type":39,"tag":380,"props":852,"children":853},{"style":564},[854],{"type":45,"value":567},{"type":39,"tag":380,"props":856,"children":857},{"style":581},[858],{"type":45,"value":584},{"type":39,"tag":380,"props":860,"children":861},{"style":570},[862],{"type":45,"value":863},"https:\u002F\u002Fapi.twilio.com\u002F2010-04-01\u002FAccounts\u002F{AccountSID}\u002FMessages.json",{"type":39,"tag":380,"props":865,"children":866},{"style":581},[867],{"type":45,"value":594},{"type":39,"tag":380,"props":869,"children":870},{"style":597},[871],{"type":45,"value":600},{"type":39,"tag":380,"props":873,"children":874},{"class":382,"line":392},[875,879,883,888],{"type":39,"tag":380,"props":876,"children":877},{"style":570},[878],{"type":45,"value":608},{"type":39,"tag":380,"props":880,"children":881},{"style":581},[882],{"type":45,"value":584},{"type":39,"tag":380,"props":884,"children":885},{"style":570},[886],{"type":45,"value":887},"Authorization: Bearer {BearerToken}",{"type":39,"tag":380,"props":889,"children":890},{"style":581},[891],{"type":45,"value":695},{"type":39,"tag":525,"props":893,"children":895},{"id":894},"sdk-support",[896],{"type":45,"value":897},"SDK Support",{"type":39,"tag":48,"props":899,"children":900},{},[901],{"type":45,"value":902},"OAuth2 is supported in all Twilio SDKs:",{"type":39,"tag":54,"props":904,"children":905},{},[906,922],{"type":39,"tag":58,"props":907,"children":908},{},[909],{"type":39,"tag":62,"props":910,"children":911},{},[912,917],{"type":39,"tag":66,"props":913,"children":914},{},[915],{"type":45,"value":916},"Language",{"type":39,"tag":66,"props":918,"children":919},{},[920],{"type":45,"value":921},"Minimum version",{"type":39,"tag":87,"props":923,"children":924},{},[925,938,951,963,975,988,1001],{"type":39,"tag":62,"props":926,"children":927},{},[928,933],{"type":39,"tag":94,"props":929,"children":930},{},[931],{"type":45,"value":932},"Java",{"type":39,"tag":94,"props":934,"children":935},{},[936],{"type":45,"value":937},"10.6.0",{"type":39,"tag":62,"props":939,"children":940},{},[941,946],{"type":39,"tag":94,"props":942,"children":943},{},[944],{"type":45,"value":945},"C#\u002F.NET",{"type":39,"tag":94,"props":947,"children":948},{},[949],{"type":45,"value":950},"7.6.0",{"type":39,"tag":62,"props":952,"children":953},{},[954,958],{"type":39,"tag":94,"props":955,"children":956},{},[957],{"type":45,"value":460},{"type":39,"tag":94,"props":959,"children":960},{},[961],{"type":45,"value":962},"5.4.0",{"type":39,"tag":62,"props":964,"children":965},{},[966,970],{"type":39,"tag":94,"props":967,"children":968},{},[969],{"type":45,"value":366},{"type":39,"tag":94,"props":971,"children":972},{},[973],{"type":45,"value":974},"9.4.1",{"type":39,"tag":62,"props":976,"children":977},{},[978,983],{"type":39,"tag":94,"props":979,"children":980},{},[981],{"type":45,"value":982},"Ruby",{"type":39,"tag":94,"props":984,"children":985},{},[986],{"type":45,"value":987},"7.4.0",{"type":39,"tag":62,"props":989,"children":990},{},[991,996],{"type":39,"tag":94,"props":992,"children":993},{},[994],{"type":45,"value":995},"PHP",{"type":39,"tag":94,"props":997,"children":998},{},[999],{"type":45,"value":1000},"8.5.0",{"type":39,"tag":62,"props":1002,"children":1003},{},[1004,1009],{"type":39,"tag":94,"props":1005,"children":1006},{},[1007],{"type":45,"value":1008},"Go",{"type":39,"tag":94,"props":1010,"children":1011},{},[1012],{"type":45,"value":1013},"1.25.1",{"type":39,"tag":48,"props":1015,"children":1016},{},[1017,1022,1024,1033,1035],{"type":39,"tag":98,"props":1018,"children":1019},{},[1020],{"type":45,"value":1021},"Docs:",{"type":45,"value":1023}," ",{"type":39,"tag":1025,"props":1026,"children":1030},"a",{"href":1027,"rel":1028},"https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fiam\u002Foauth-apps\u002Foauth-access-token",[1029],"nofollow",[1031],{"type":45,"value":1032},"OAuth access tokens",{"type":45,"value":1034}," | ",{"type":39,"tag":1025,"props":1036,"children":1039},{"href":1037,"rel":1038},"https:\u002F\u002Fwww.twilio.com\u002Fdocs\u002Fsegment\u002Fconnections\u002Foauth",[1029],[1040],{"type":45,"value":1041},"Segment OAuth connections",{"type":39,"tag":250,"props":1043,"children":1044},{},[],{"type":39,"tag":40,"props":1046,"children":1048},{"id":1047},"access-tokens-client-side-sdks",[1049],{"type":45,"value":1050},"Access Tokens (Client-Side SDKs)",{"type":39,"tag":48,"props":1052,"children":1053},{},[1054],{"type":45,"value":1055},"Short-lived JWTs for authenticating browser\u002Fmobile clients. Generate server-side, pass to the client.",{"type":39,"tag":48,"props":1057,"children":1058},{},[1059],{"type":39,"tag":98,"props":1060,"children":1061},{},[1062],{"type":45,"value":366},{"type":39,"tag":368,"props":1064,"children":1066},{"className":370,"code":1065,"language":372,"meta":373,"style":373},"from twilio.jwt.access_token import AccessToken\nfrom twilio.jwt.access_token.grants import VoiceGrant\n\ntoken = AccessToken(\n    os.environ[\"TWILIO_ACCOUNT_SID\"],\n    os.environ[\"TWILIO_API_KEY\"],\n    os.environ[\"TWILIO_API_SECRET\"],\n    identity=\"user-123\",\n    ttl=3600\n)\ntoken.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\nprint(token.to_jwt())\n",[1067],{"type":39,"tag":376,"props":1068,"children":1069},{"__ignoreMap":373},[1070,1078,1086,1093,1101,1109,1117,1124,1132,1141,1149,1158],{"type":39,"tag":380,"props":1071,"children":1072},{"class":382,"line":383},[1073],{"type":39,"tag":380,"props":1074,"children":1075},{},[1076],{"type":45,"value":1077},"from twilio.jwt.access_token import AccessToken\n",{"type":39,"tag":380,"props":1079,"children":1080},{"class":382,"line":392},[1081],{"type":39,"tag":380,"props":1082,"children":1083},{},[1084],{"type":45,"value":1085},"from twilio.jwt.access_token.grants import VoiceGrant\n",{"type":39,"tag":380,"props":1087,"children":1088},{"class":382,"line":401},[1089],{"type":39,"tag":380,"props":1090,"children":1091},{"emptyLinePlaceholder":405},[1092],{"type":45,"value":408},{"type":39,"tag":380,"props":1094,"children":1095},{"class":382,"line":411},[1096],{"type":39,"tag":380,"props":1097,"children":1098},{},[1099],{"type":45,"value":1100},"token = AccessToken(\n",{"type":39,"tag":380,"props":1102,"children":1103},{"class":382,"line":420},[1104],{"type":39,"tag":380,"props":1105,"children":1106},{},[1107],{"type":45,"value":1108},"    os.environ[\"TWILIO_ACCOUNT_SID\"],\n",{"type":39,"tag":380,"props":1110,"children":1111},{"class":382,"line":429},[1112],{"type":39,"tag":380,"props":1113,"children":1114},{},[1115],{"type":45,"value":1116},"    os.environ[\"TWILIO_API_KEY\"],\n",{"type":39,"tag":380,"props":1118,"children":1119},{"class":382,"line":27},[1120],{"type":39,"tag":380,"props":1121,"children":1122},{},[1123],{"type":45,"value":435},{"type":39,"tag":380,"props":1125,"children":1126},{"class":382,"line":446},[1127],{"type":39,"tag":380,"props":1128,"children":1129},{},[1130],{"type":45,"value":1131},"    identity=\"user-123\",\n",{"type":39,"tag":380,"props":1133,"children":1135},{"class":382,"line":1134},9,[1136],{"type":39,"tag":380,"props":1137,"children":1138},{},[1139],{"type":45,"value":1140},"    ttl=3600\n",{"type":39,"tag":380,"props":1142,"children":1144},{"class":382,"line":1143},10,[1145],{"type":39,"tag":380,"props":1146,"children":1147},{},[1148],{"type":45,"value":452},{"type":39,"tag":380,"props":1150,"children":1152},{"class":382,"line":1151},11,[1153],{"type":39,"tag":380,"props":1154,"children":1155},{},[1156],{"type":45,"value":1157},"token.add_grant(VoiceGrant(outgoing_application_sid=\"APxxxx\"))\n",{"type":39,"tag":380,"props":1159,"children":1161},{"class":382,"line":1160},12,[1162],{"type":39,"tag":380,"props":1163,"children":1164},{},[1165],{"type":45,"value":1166},"print(token.to_jwt())\n",{"type":39,"tag":48,"props":1168,"children":1169},{},[1170,1172,1178,1180,1186,1187,1193,1195],{"type":45,"value":1171},"Grant types: ",{"type":39,"tag":376,"props":1173,"children":1175},{"className":1174},[],[1176],{"type":45,"value":1177},"VoiceGrant",{"type":45,"value":1179},", ",{"type":39,"tag":376,"props":1181,"children":1183},{"className":1182},[],[1184],{"type":45,"value":1185},"VideoGrant",{"type":45,"value":1179},{"type":39,"tag":376,"props":1188,"children":1190},{"className":1189},[],[1191],{"type":45,"value":1192},"ChatGrant",{"type":45,"value":1194}," (Conversations), ",{"type":39,"tag":376,"props":1196,"children":1198},{"className":1197},[],[1199],{"type":45,"value":1200},"SyncGrant",{"type":39,"tag":250,"props":1202,"children":1203},{},[],{"type":39,"tag":40,"props":1205,"children":1207},{"id":1206},"test-credentials",[1208],{"type":45,"value":1209},"Test Credentials",{"type":39,"tag":48,"props":1211,"children":1212},{},[1213],{"type":45,"value":1214},"Make API calls without charges. Find at Console → Account → API keys & tokens → Test credentials.",{"type":39,"tag":48,"props":1216,"children":1217},{},[1218,1220,1226,1228,1234,1236,1242],{"type":45,"value":1219},"Magic numbers: ",{"type":39,"tag":376,"props":1221,"children":1223},{"className":1222},[],[1224],{"type":45,"value":1225},"+15005550006",{"type":45,"value":1227}," (valid), ",{"type":39,"tag":376,"props":1229,"children":1231},{"className":1230},[],[1232],{"type":45,"value":1233},"+15005550001",{"type":45,"value":1235}," (invalid, error 21211), ",{"type":39,"tag":376,"props":1237,"children":1239},{"className":1238},[],[1240],{"type":45,"value":1241},"+15005550007",{"type":45,"value":1243}," (no SMS, error 21612)",{"type":39,"tag":250,"props":1245,"children":1246},{},[],{"type":39,"tag":40,"props":1248,"children":1250},{"id":1249},"cannot",[1251],{"type":45,"value":1252},"CANNOT",{"type":39,"tag":205,"props":1254,"children":1255},{},[1256,1266,1276,1286,1296,1314,1324,1334,1352],{"type":39,"tag":209,"props":1257,"children":1258},{},[1259,1264],{"type":39,"tag":98,"props":1260,"children":1261},{},[1262],{"type":45,"value":1263},"Standard keys cannot access \u002FAccounts or \u002FKeys endpoints",{"type":45,"value":1265}," — Returns 20003 (401). Use Auth Token or Main key.",{"type":39,"tag":209,"props":1267,"children":1268},{},[1269,1274],{"type":39,"tag":98,"props":1270,"children":1271},{},[1272],{"type":45,"value":1273},"Cannot create restricted keys via v2010 API",{"type":45,"value":1275}," — Silently creates a standard key instead. Use v1 IAM API.",{"type":39,"tag":209,"props":1277,"children":1278},{},[1279,1284],{"type":39,"tag":98,"props":1280,"children":1281},{},[1282],{"type":45,"value":1283},"Restricted keys cannot generate Access Tokens",{"type":45,"value":1285}," — Only Standard and Main keys can.",{"type":39,"tag":209,"props":1287,"children":1288},{},[1289,1294],{"type":39,"tag":98,"props":1290,"children":1291},{},[1292],{"type":45,"value":1293},"Cannot revoke individual Access Tokens",{"type":45,"value":1295}," — Valid until expiration (max 24h). Delete the issuing API key to revoke all.",{"type":39,"tag":209,"props":1297,"children":1298},{},[1299,1312],{"type":39,"tag":98,"props":1300,"children":1301},{},[1302,1304,1310],{"type":45,"value":1303},"OAuth2 only supports ",{"type":39,"tag":376,"props":1305,"children":1307},{"className":1306},[],[1308],{"type":45,"value":1309},"client_credentials",{"type":45,"value":1311}," grant",{"type":45,"value":1313}," — No refresh tokens, no authorization code flow.",{"type":39,"tag":209,"props":1315,"children":1316},{},[1317,1322],{"type":39,"tag":98,"props":1318,"children":1319},{},[1320],{"type":45,"value":1321},"OAuth2 tokens expire after 1 hour",{"type":45,"value":1323}," — Your application must handle token refresh.",{"type":39,"tag":209,"props":1325,"children":1326},{},[1327,1332],{"type":39,"tag":98,"props":1328,"children":1329},{},[1330],{"type":45,"value":1331},"API Key Secret shown only at creation",{"type":45,"value":1333}," — Cannot be retrieved afterward.",{"type":39,"tag":209,"props":1335,"children":1336},{},[1337,1342,1344,1350],{"type":39,"tag":98,"props":1338,"children":1339},{},[1340],{"type":45,"value":1341},"Auth Token rotation does not affect API keys",{"type":45,"value":1343}," — It invalidates all integrations using ",{"type":39,"tag":376,"props":1345,"children":1347},{"className":1346},[],[1348],{"type":45,"value":1349},"AccountSID:AuthToken",{"type":45,"value":1351}," and breaks webhook signature validation, but API keys (SK-prefixed) are independent and unaffected. This is why API keys are recommended for production from day one.",{"type":39,"tag":209,"props":1353,"children":1354},{},[1355,1360],{"type":39,"tag":98,"props":1356,"children":1357},{},[1358],{"type":45,"value":1359},"Test credentials work with only 4 endpoints",{"type":45,"value":1361}," — Messages, Calls, IncomingPhoneNumbers, Lookups. All others return 403.",{"type":39,"tag":250,"props":1363,"children":1364},{},[],{"type":39,"tag":40,"props":1366,"children":1368},{"id":1367},"next-steps",[1369],{"type":45,"value":1370},"Next Steps",{"type":39,"tag":205,"props":1372,"children":1373},{},[1374,1389,1404,1419],{"type":39,"tag":209,"props":1375,"children":1376},{},[1377,1382,1383],{"type":39,"tag":98,"props":1378,"children":1379},{},[1380],{"type":45,"value":1381},"Account setup and sub-accounts:",{"type":45,"value":1023},{"type":39,"tag":376,"props":1384,"children":1386},{"className":1385},[],[1387],{"type":45,"value":1388},"twilio-account-setup",{"type":39,"tag":209,"props":1390,"children":1391},{},[1392,1397,1398],{"type":39,"tag":98,"props":1393,"children":1394},{},[1395],{"type":45,"value":1396},"HIPAA account configuration:",{"type":45,"value":1023},{"type":39,"tag":376,"props":1399,"children":1401},{"className":1400},[],[1402],{"type":45,"value":1403},"twilio-security-compliance-hipaa",{"type":39,"tag":209,"props":1405,"children":1406},{},[1407,1412,1413],{"type":39,"tag":98,"props":1408,"children":1409},{},[1410],{"type":45,"value":1411},"Webhook signature validation:",{"type":45,"value":1023},{"type":39,"tag":376,"props":1414,"children":1416},{"className":1415},[],[1417],{"type":45,"value":1418},"twilio-webhook-architecture",{"type":39,"tag":209,"props":1420,"children":1421},{},[1422,1427,1428],{"type":39,"tag":98,"props":1423,"children":1424},{},[1425],{"type":45,"value":1426},"Credential security patterns:",{"type":45,"value":1023},{"type":39,"tag":376,"props":1429,"children":1431},{"className":1430},[],[1432],{"type":45,"value":1433},"twilio-security-hardening",{"type":39,"tag":1435,"props":1436,"children":1437},"style",{},[1438],{"type":45,"value":1439},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":1441,"total":1548},[1442,1457,1477,1488,1500,1515,1532],{"slug":1388,"name":1388,"fn":1443,"description":1444,"org":1445,"tags":1446,"stars":23,"repoUrl":24,"updatedAt":1456},"configure Twilio accounts and credentials","Create and configure a Twilio account from scratch. Covers free trial signup, trial limitations, getting credentials (Account SID and Auth Token), buying a phone number, verifying recipient numbers for trial use, SDK installation, first API call, subaccount management (creation, inheritance, credential isolation, limits), and enabling specific products (AI Assistants, Conversations, Verify, ConversationRelay, WhatsApp). Use this skill before any other Twilio skill if you do not yet have a Twilio account or need to enable a product. For Organization-level governance (SSO, SCIM, multi-team), see `twilio-organizations-setup`.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1447,1450,1453],{"name":1448,"slug":1449,"type":15},"API Development","api-development",{"name":1451,"slug":1452,"type":15},"Communications","communications",{"name":1454,"slug":1455,"type":15},"SMS","sms","2026-08-01T05:43:28.968968",{"slug":1458,"name":1458,"fn":1459,"description":1460,"org":1461,"tags":1462,"stars":23,"repoUrl":24,"updatedAt":1476},"twilio-agent-augmentation-architect","augment human agents with AI intelligence","Planning skill for augmenting human agents with real-time AI intelligence. Qualifies the developer's use case across coaching, compliance, QA, and routing to recommend the right Conversation Intelligence + Conversation Memory + TaskRouter architecture. Handles both \"I want to add AI coaching to my call center\" and \"configure Conversation Intelligence operators for script adherence.\"\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1463,1466,1469,1472,1475],{"name":1464,"slug":1465,"type":15},"Agents","agents",{"name":1467,"slug":1468,"type":15},"AI","ai",{"name":1470,"slug":1471,"type":15},"Coaching","coaching",{"name":1473,"slug":1474,"type":15},"QA","qa",{"name":9,"slug":8,"type":15},"2026-07-17T06:07:58.250609",{"slug":1478,"name":1478,"fn":1479,"description":1480,"org":1481,"tags":1482,"stars":23,"repoUrl":24,"updatedAt":1487},"twilio-agent-connect","connect AI agents to Twilio channels","Connect third-party AI agents (OpenAI, Bedrock, LangChain, Microsoft Foundry) to Twilio's communication channels using the Twilio Agent Connect SDK. Covers identity resolution, memory and context management via Conversation Memory, conversation orchestration via Conversation Orchestrator, multi-channel handling (Voice, SMS, RCS, WhatsApp, Chat), and AI-to-human escalation. Use this skill when integrating an existing LLM agent with Twilio services.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1483,1484,1485,1486],{"name":1464,"slug":1465,"type":15},{"name":1448,"slug":1449,"type":15},{"name":1451,"slug":1452,"type":15},{"name":9,"slug":8,"type":15},"2026-07-17T06:06:05.217098",{"slug":1489,"name":1489,"fn":1490,"description":1491,"org":1492,"tags":1493,"stars":23,"repoUrl":24,"updatedAt":1499},"twilio-ai-agent-architect","plan Twilio conversational AI agents","Planning skill for AI-powered conversational agents. Qualifies the developer's use case across outcome sophistication, entry point, and customer profile to recommend the right Twilio Conversations architecture and implementation skills. Handles both high-level requests (\"build me a voice AI assistant\") and specific ones (\"integrate ConversationRelay with my OpenAI backend\").\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1494,1495,1498],{"name":1464,"slug":1465,"type":15},{"name":1496,"slug":1497,"type":15},"Architecture","architecture",{"name":9,"slug":8,"type":15},"2026-07-17T06:07:48.883723",{"slug":1501,"name":1501,"fn":1502,"description":1503,"org":1504,"tags":1505,"stars":23,"repoUrl":24,"updatedAt":1514},"twilio-call-recordings","record and manage Twilio voice calls","Record Twilio voice calls correctly. Covers the critical distinction between Record verb (voicemail) and Dial record (call recording), dual-channel for QA, mid-call pause for PCI, Conference recording, and the ConversationRelay workaround. Use this skill whenever you need to capture call audio for compliance, QA, or analytics.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1506,1509,1512,1513],{"name":1507,"slug":1508,"type":15},"Audio","audio",{"name":1510,"slug":1511,"type":15},"Compliance","compliance",{"name":1473,"slug":1474,"type":15},{"name":9,"slug":8,"type":15},"2026-07-17T06:07:55.268412",{"slug":1516,"name":1516,"fn":1517,"description":1518,"org":1519,"tags":1520,"stars":23,"repoUrl":24,"updatedAt":1531},"twilio-cli-reference","manage Twilio resources via CLI","Twilio CLI reference for managing Twilio resources from the terminal. Covers installation, credential profiles, phone number provisioning, sending SMS and email, webhook configuration, local development with a tunneling service, debugging with watch and logs, serverless deployment, and plugin ecosystem. Use when the developer asks to \"just do it\", \"set this up\", \"run a command\", mentions \"CLI\", \"command line\", or \"terminal\", or when an AI agent can execute a task directly instead of writing application code.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1521,1524,1527,1530],{"name":1522,"slug":1523,"type":15},"CLI","cli",{"name":1525,"slug":1526,"type":15},"Local Development","local-development",{"name":1528,"slug":1529,"type":15},"Operations","operations",{"name":9,"slug":8,"type":15},"2026-07-17T06:07:54.925664",{"slug":1533,"name":1533,"fn":1534,"description":1535,"org":1536,"tags":1537,"stars":23,"repoUrl":24,"updatedAt":1547},"twilio-compliance-onboarding","manage Twilio messaging and voice compliance","Registrations required BEFORE Twilio traffic works. Covers messaging programs (A2P 10DLC, toll-free verification, WhatsApp WABA, RCS, short code, alphanumeric sender) and voice trust programs (STIR\u002FSHAKEN, Voice Integrity, Branded Calling, CNAM). Each number\u002Fsender type has its own program — registration blocks traffic until complete.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1538,1539,1542,1543,1544],{"name":1510,"slug":1511,"type":15},{"name":1540,"slug":1541,"type":15},"Messaging","messaging",{"name":1454,"slug":1455,"type":15},{"name":9,"slug":8,"type":15},{"name":1545,"slug":1546,"type":15},"WhatsApp","whatsapp","2026-07-17T06:05:47.897229",57,{"items":1550,"total":1548},[1551,1557,1565,1572,1578,1585,1592,1600,1614,1627,1643,1661],{"slug":1388,"name":1388,"fn":1443,"description":1444,"org":1552,"tags":1553,"stars":23,"repoUrl":24,"updatedAt":1456},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1554,1555,1556],{"name":1448,"slug":1449,"type":15},{"name":1451,"slug":1452,"type":15},{"name":1454,"slug":1455,"type":15},{"slug":1458,"name":1458,"fn":1459,"description":1460,"org":1558,"tags":1559,"stars":23,"repoUrl":24,"updatedAt":1476},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1560,1561,1562,1563,1564],{"name":1464,"slug":1465,"type":15},{"name":1467,"slug":1468,"type":15},{"name":1470,"slug":1471,"type":15},{"name":1473,"slug":1474,"type":15},{"name":9,"slug":8,"type":15},{"slug":1478,"name":1478,"fn":1479,"description":1480,"org":1566,"tags":1567,"stars":23,"repoUrl":24,"updatedAt":1487},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1568,1569,1570,1571],{"name":1464,"slug":1465,"type":15},{"name":1448,"slug":1449,"type":15},{"name":1451,"slug":1452,"type":15},{"name":9,"slug":8,"type":15},{"slug":1489,"name":1489,"fn":1490,"description":1491,"org":1573,"tags":1574,"stars":23,"repoUrl":24,"updatedAt":1499},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1575,1576,1577],{"name":1464,"slug":1465,"type":15},{"name":1496,"slug":1497,"type":15},{"name":9,"slug":8,"type":15},{"slug":1501,"name":1501,"fn":1502,"description":1503,"org":1579,"tags":1580,"stars":23,"repoUrl":24,"updatedAt":1514},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1581,1582,1583,1584],{"name":1507,"slug":1508,"type":15},{"name":1510,"slug":1511,"type":15},{"name":1473,"slug":1474,"type":15},{"name":9,"slug":8,"type":15},{"slug":1516,"name":1516,"fn":1517,"description":1518,"org":1586,"tags":1587,"stars":23,"repoUrl":24,"updatedAt":1531},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1588,1589,1590,1591],{"name":1522,"slug":1523,"type":15},{"name":1525,"slug":1526,"type":15},{"name":1528,"slug":1529,"type":15},{"name":9,"slug":8,"type":15},{"slug":1533,"name":1533,"fn":1534,"description":1535,"org":1593,"tags":1594,"stars":23,"repoUrl":24,"updatedAt":1547},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1595,1596,1597,1598,1599],{"name":1510,"slug":1511,"type":15},{"name":1540,"slug":1541,"type":15},{"name":1454,"slug":1455,"type":15},{"name":9,"slug":8,"type":15},{"name":1545,"slug":1546,"type":15},{"slug":1601,"name":1601,"fn":1602,"description":1603,"org":1604,"tags":1605,"stars":23,"repoUrl":24,"updatedAt":1613},"twilio-compliance-traffic","ensure compliance for Twilio messaging traffic","Rules you must follow for Twilio messaging and voice traffic. Covers TCPA (consent tiers, quiet hours, DNC), GDPR (EU consent, right to deletion), PCI DSS (payment recording, Pay verb), HIPAA (BAA, PHI), FDCPA (debt collection limits), CAN-SPAM, WhatsApp policies, SHAKEN\u002FSTIR, and consent management patterns. Use this skill proactively when developers have working traffic to ensure they follow the rules.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1606,1607,1608,1611,1612],{"name":1510,"slug":1511,"type":15},{"name":1540,"slug":1541,"type":15},{"name":1609,"slug":1610,"type":15},"Regulatory Compliance","regulatory-compliance",{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},"2026-07-17T06:07:55.952779",{"slug":1615,"name":1615,"fn":1616,"description":1617,"org":1618,"tags":1619,"stars":23,"repoUrl":24,"updatedAt":1626},"twilio-conference-calls","build multi-party calls with Twilio Conference","Build multi-party calls using Twilio Conference. Covers warm transfer, cold transfer, coaching (whisper), hold vs mute, participant modes, and supervisor barge. Use this skill for any contact center, support line, or scenario requiring transfers, holds, or multi-party calls.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1620,1621,1622,1625],{"name":1507,"slug":1508,"type":15},{"name":1451,"slug":1452,"type":15},{"name":1623,"slug":1624,"type":15},"Meetings","meetings",{"name":9,"slug":8,"type":15},"2026-07-17T06:07:55.603708",{"slug":1628,"name":1628,"fn":1629,"description":1630,"org":1631,"tags":1632,"stars":23,"repoUrl":24,"updatedAt":1642},"twilio-content-template-builder","create and send message templates with Twilio","Create, manage, and send message templates using Twilio's Content API. Covers template creation for WhatsApp, SMS, RCS, and MMS; variable usage; WhatsApp Meta approval; and sending templates via ContentSid. Use this skill when building structured messages that require pre-approval or consistent formatting across channels.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1633,1636,1637,1638,1641],{"name":1634,"slug":1635,"type":15},"Email","email",{"name":1540,"slug":1541,"type":15},{"name":1454,"slug":1455,"type":15},{"name":1639,"slug":1640,"type":15},"Templates","templates",{"name":9,"slug":8,"type":15},"2026-07-17T06:04:26.637309",{"slug":1644,"name":1644,"fn":1645,"description":1646,"org":1647,"tags":1648,"stars":23,"repoUrl":24,"updatedAt":1660},"twilio-conversation-intelligence","build conversation intelligence pipelines","Twilio Conversation Intelligence development guide. Use when building real-time or post-call conversation analysis, language operator pipelines, sentiment analysis, agent assist, cross-channel analytics, or querying aggregated conversation insights (sentiment trends, escalation rates, dashboards).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1649,1650,1653,1656,1659],{"name":1464,"slug":1465,"type":15},{"name":1651,"slug":1652,"type":15},"Analytics","analytics",{"name":1654,"slug":1655,"type":15},"Monitoring","monitoring",{"name":1657,"slug":1658,"type":15},"NLP","nlp",{"name":9,"slug":8,"type":15},"2026-07-17T06:07:52.545387",{"slug":1662,"name":1662,"fn":1663,"description":1664,"org":1665,"tags":1666,"stars":23,"repoUrl":24,"updatedAt":1672},"twilio-conversation-memory","manage conversation memory with Twilio","Store and retrieve conversation context using Twilio Conversation Memory. Covers Memory Store provisioning, profile management, traits, observations, conversation summaries, and semantic Recall. Use this skill to give AI agents or human agents persistent memory of conversations across sessions and channels.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1667,1668,1671],{"name":1464,"slug":1465,"type":15},{"name":1669,"slug":1670,"type":15},"Memory","memory",{"name":9,"slug":8,"type":15},"2026-07-17T06:04:19.526724"]