{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"7a589995bd1f98561e59e7a6a2e685794e9f02e188b3c5c3113b961508ecb8a8","entry":{"id":"twilio/account-and-keys","name":"Twilio account, upgrade and API keys","vendor":"Twilio","summary":"Create a Twilio account, upgrade it from trial to paid, and create an API key (SID + secret) for server-side calls. Almost every other Twilio product (Verify, WhatsApp, toll-free, A2P 10DLC) starts here.","aliases":["twilio","twilio-account","twilio-api-key"],"category":"messaging","group":"B","homepage":"https://www.twilio.com/","docs":["https://www.twilio.com/docs/iam/api-keys","https://www.twilio.com/docs/usage/tutorials/how-to-use-your-free-trial-account","https://www.twilio.com/docs/iam/api/authtoken"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"api-keys","url":"https://www.twilio.com/docs/iam/api-keys","title":"Twilio docs – API keys overview","accessed":"2026-10-25","supports":"Key types (Main, Standard, Restricted); Main only creatable in Console; Main equals Account SID + Auth Token access; API keys are the preferred auth method; credentials are Region-specific","kind":"official"},{"id":"regional-keys","url":"https://www.twilio.com/docs/global-infrastructure/manage-regional-api-credentials","title":"Twilio docs – Manage regional API credentials","accessed":"2026-10-25","supports":"API key secret is displayed only once at creation; select Region before creating a key; credentials only valid in the Region where created","kind":"official"},{"id":"trial","url":"https://www.twilio.com/docs/usage/tutorials/how-to-use-your-free-trial-account","title":"Twilio docs – How to use your free trial account","accessed":"2026-10-25","supports":"Sign-up verifies email and a personal phone number; trial limits (5 verified recipients, sign-up country only, templates only, 30-day expiry, free units); upgrade steps (profile, address, starting balance, payment details); A2P 10DLC needs a paid account","kind":"official"},{"id":"authtoken","url":"https://www.twilio.com/docs/iam/api/authtoken","title":"Twilio docs – Auth Token resource (secondary token and promote)","accessed":"2026-10-25","supports":"Auth Token can be rotated in Console or API; secondary token can be created and promoted, which deletes the old primary","kind":"official"},{"id":"mfa-blog","url":"https://www.twilio.com/en-us/blog/mandatory-2fa-account-login","title":"Twilio blog – Mandatory two-factor authentication for account login","accessed":"2026-10-25","supports":"Twilio enforces 2FA at login for paid accounts (from 12 October 2020); trial accounts excluded","kind":"official"},{"id":"fraud-engage","url":"https://www.twilio.com/docs/usage/fraud-response-guide/engage","title":"Twilio docs – Fraud response guide, engage Twilio Support","accessed":"2026-10-25","supports":"Twilio may suspend accounts for AUP violations, unusual usage spikes, suspected compromise or unpaid balances; contact Support within 24 hours to start review","kind":"official"},{"id":"aup","url":"https://www.twilio.com/en-us/legal/aup","title":"Twilio Acceptable Use Policy","accessed":"2026-10-25","supports":"Twilio may suspend use of the Services if the customer or an end user violates the AUP","kind":"official"}],"allowed_domains":["twilio.com"],"account_model":{"summary":"One Twilio login (user) can belong to one or more Twilio accounts. Each account has an Account SID (AC…) and a primary Auth Token, and can hold subaccounts. API keys (SK…) live inside an account and, like Auth Tokens, are valid only in the Twilio Region where they were created.","accounts":[{"name":"Twilio user login","kind":"personal","owned_by":"the person","note":"Email and personal phone number are verified at sign-up."},{"name":"Twilio account (AC…)","kind":"organisation","owned_by":"the person or the company","parent":"Twilio user login","required":true,"note":"Starts as a trial; must be upgraded (paid) for most production messaging."},{"name":"Subaccount","kind":"project","parent":"Twilio account (AC…)","required":false,"note":"Optional; each has its own SID and Auth Token that must be rotated separately."}],"notes":["Main keys equal Account SID + Auth Token access; Standard keys cannot manage Accounts or Keys; Restricted keys are fine-grained.","Credentials made in one Twilio Region fail authentication in another."]},"prerequisites":[{"need":"An email address and a personal mobile phone that can receive SMS","note":"Both are verified during sign-up."}],"have_ready":[{"kind":"phone_for_2fa","description":"A personal mobile phone you control","why":"Sign-up verifies a personal phone number, and paid accounts must use 2FA at login.","needed_for":["sign-up","upgrade"],"auto_check":"none","source":"trial"},{"kind":"payment_card","description":"A card for the starting balance","why":"Upgrading asks for an address, a starting balance and payment details.","needed_for":["upgrade"],"auto_check":"none","source":"trial"},{"kind":"proof_of_address","description":"Your (or your business) address as you want it on the account profile","why":"The upgrade flow asks you to create a profile and add an address.","needed_for":["upgrade"],"auto_check":"none","source":"trial"}],"steps":[{"id":"sign-up","title":"Create a Twilio account","summary":"You sign up yourself at twilio.com, then verify your email address and a personal phone number. verapli never creates the account for you.","route":"guided","depends_on":[],"gate":"human_submit","url":"https://www.twilio.com/try-twilio","lead_time":{"official":{"text":"Trial starts immediately after email and phone verification; trial expires 30 days after sign-up.","source":"trial"},"typical_minutes":5},"recovery":[{"hiccup":"A trial message or call fails to reach a number","fix":"On trial you can only reach verified recipients (up to 5, in your sign-up country). Verify the recipient in the Console or upgrade.","source":"trial"}],"sources":["trial"]},{"id":"enable-2fa","title":"Turn on two-step verification","summary":"Set up 2FA for your Twilio login. It is enforced on paid accounts, so do it before upgrading.","route":"guided","depends_on":["sign-up"],"gate":"2fa","preflight":["mfa_enabled"],"sources":["mfa-blog"]},{"id":"upgrade","title":"Upgrade from trial","summary":"Click Upgrade in the Console, create a profile, add an address, choose a starting balance and enter payment details. You enter the card yourself.","route":"guided","depends_on":["enable-2fa"],"gate":"human_payment","url":"https://console.twilio.com/","lead_time":{"official":{"text":"No review time stated; upgrade is completed in the Console.","source":"trial"},"typical_minutes":10},"sources":["trial"]},{"id":"choose-region","title":"Pick the Twilio Region for your keys","summary":"Select the Region you will send traffic in before creating the key; keys only work in the Region where they were made.","route":"guided","depends_on":["sign-up"],"gate":"none","sources":["regional-keys"]},{"id":"create-api-key","title":"Create a Standard API key","summary":"In Console, open API keys & tokens and create a key. Choose Standard (or Restricted) unless you really need Main. The secret is shown once only; verapli captures it straight into your vault.","route":"copilot","depends_on":["choose-region"],"gate":"human_submit","url":"https://console.twilio.com/","recovery":[{"hiccup":"The key secret was lost or not copied","fix":"The secret cannot be shown again. Create a new key, update your app, then (yourself) delete the old key from its details page.","source":"regional-keys"},{"hiccup":"Requests fail with authentication errors although the key is correct","fix":"Check the key was made in the same Twilio Region your code calls; credentials are Region-specific.","source":"regional-keys"}],"capture":{"env":"TWILIO_API_KEY_SECRET","kind":"secret"},"sources":["api-keys","regional-keys"]},{"id":"record-account-sid","title":"Note your Account SID","summary":"Copy the Account SID (AC…) from the Console dashboard; it is not secret but every API call needs it.","route":"copilot","depends_on":["sign-up"],"gate":"none","url":"https://console.twilio.com/","capture":{"env":"TWILIO_ACCOUNT_SID","kind":"other"}}],"outputs":[{"name":"TWILIO_ACCOUNT_SID","description":"Twilio Account SID","secret":false,"example_format":"AC… (34 characters)","from_step":"record-account-sid"},{"name":"TWILIO_API_KEY_SID","description":"API key SID (used as the username with the secret)","secret":false,"example_format":"SK… (34 characters)","from_step":"create-api-key"},{"name":"TWILIO_API_KEY_SECRET","description":"API key secret, shown once at creation","secret":true,"from_step":"create-api-key"}],"terms_notes":[{"kind":"rules_say","severity":"red","text":"Twilio may suspend your use of the Services if you or one of your end users breaks the Acceptable Use Policy (for example spam or phishing).","source":"aup"},{"kind":"rules_say","severity":"amber","text":"Twilio may temporarily suspend accounts for sudden traffic spikes, suspected compromise or overdue balances; contact Support within 24 hours to start reactivation.","source":"fraud-engage"},{"kind":"rules_say","severity":"yellow","text":"A Main API key has the same power as your Account SID and Auth Token; prefer Standard or Restricted keys.","source":"api-keys"},{"kind":"rules_say","severity":"yellow","text":"Promoting a secondary Auth Token instantly deletes the old primary token; update your apps first.","source":"authtoken"}],"renewals":[{"what":"Trial account expiry (upgrade or lose the trial)","every":"30 days after sign-up (once)","source":"trial"}],"pricing_notes":{"free_tier":"Trial with product-specific free units (examples given include 100 SMS and 75 voice minutes), 30 days.","costs":"Pay as you go from a prepaid balance after upgrade.","notes":"Upgrading gives eligible products a fresh set of post-upgrade free units before usage is charged.","source":"trial"},"stripe_projects":false,"api_provisioning":{"available":"partial","notes":"Standard and Restricted keys can be created by REST API once you already hold credentials; Main keys and the account itself are Console-only.","docs":["https://www.twilio.com/docs/iam/api-keys"],"source":"api-keys"},"detect":{"env_names":["TWILIO_ACCOUNT_SID","TWILIO_AUTH_TOKEN","TWILIO_API_KEY","TWILIO_API_SECRET"],"packages":["twilio"]}}}