Twilio API Skill (Advanced)
Purpose
Provide a production-oriented guide for Twilio API workflows across messaging and communications channels using direct HTTPS requests.
Best fit
- - You need SMS/MMS, WhatsApp, Voice, or Verify flows.
- You want reliable webhook handling and operational guardrails.
- You prefer direct HTTP requests rather than SDKs.
Not a fit
- - You require a full SDK or complex multi-service orchestration.
- You need advanced campaign management across multiple ESPs.
Quick orientation
- - Read
references/twilio-api-overview.md for core surfaces and base endpoints. - Read
references/twilio-auth-and-webhooks.md for auth and webhook validation. - Read
references/twilio-messaging-sms-mms.md for SMS/MMS workflows. - Read
references/twilio-whatsapp.md for WhatsApp messaging specifics. - Read
references/twilio-voice.md for call/IVR basics. - Read
references/twilio-conversations.md for omni-channel threads. - Read
references/twilio-verify.md for OTP/verification flows. - Read
references/twilio-sendgrid.md for email sending. - Read
references/twilio-studio.md for low-code flow orchestration. - Read
references/twilio-lookup.md for phone intelligence. - Read
references/twilio-proxy.md for masked communications. - Read
references/twilio-sync.md for real-time state. - Read
references/twilio-taskrouter.md for routing and queues. - Read
references/twilio-segment-engage.md for CDP and audience activation.
Required inputs
- - Account SID and Auth Token (or API Key/Secret).
- Sender identity (phone number, messaging service, WhatsApp sender).
- Webhook URLs for callbacks.
- Compliance constraints (opt-in, regional regulations).
Expected output
- - A clear workflow plan, method checklist, and operational guardrails.
Operational notes
- - Validate webhook signatures on every inbound request.
- Keep outbound rate limits in mind and retry safely.
- Store secrets in a vault and rotate regularly.
Security notes
- - Never log credentials.
- Use least-privilege API keys where possible.
Twilio API 技能（高级）
目的
提供面向生产环境的 Twilio API 工作流指南，涵盖通过直接 HTTPS 请求实现的消息和通信渠道。
最佳适用场景
- - 需要短信/彩信、WhatsApp、语音或验证流程。
- 需要可靠的 Webhook 处理与操作防护措施。
- 偏好直接使用 HTTP 请求而非 SDK。
不适用场景
- - 需要完整的 SDK 或复杂的多服务编排。
- 需要在多个 ESP 间进行高级活动管理。
快速导航
- - 阅读 references/twilio-api-overview.md 了解核心接口和基础端点。
- 阅读 references/twilio-auth-and-webhooks.md 了解认证和 Webhook 验证。
- 阅读 references/twilio-messaging-sms-mms.md 了解短信/彩信工作流。
- 阅读 references/twilio-whatsapp.md 了解 WhatsApp 消息发送细节。
- 阅读 references/twilio-voice.md 了解通话/IVR 基础。
- 阅读 references/twilio-conversations.md 了解全渠道对话线程。
- 阅读 references/twilio-verify.md 了解 OTP/验证流程。
- 阅读 references/twilio-sendgrid.md 了解邮件发送。
- 阅读 references/twilio-studio.md 了解低代码流程编排。
- 阅读 references/twilio-lookup.md 了解电话智能查询。
- 阅读 references/twilio-proxy.md 了解掩码通信。
- 阅读 references/twilio-sync.md 了解实时状态同步。
- 阅读 references/twilio-taskrouter.md 了解路由和队列。
- 阅读 references/twilio-segment-engage.md 了解 CDP 和受众激活。
必需输入
- - 账户 SID 和认证令牌（或 API 密钥/密钥对）。
- 发送方身份（电话号码、消息服务、WhatsApp 发送方）。
- 用于回调的 Webhook URL。
- 合规约束（用户授权、地区法规）。
预期输出
操作说明
- - 对每个入站请求验证 Webhook 签名。
- 注意出站速率限制，安全地进行重试。
- 将密钥存储在保险库中并定期轮换。
安全说明
- - 切勿记录凭证。
- 尽可能使用最小权限的 API 密钥。
