---
title: "Twilio"
description: "Cloud communications platform providing APIs and services for messaging, voice, email, authentication, and customer engagement."
---

# Twilio
> Cloud communications platform providing APIs and services for messaging, voice, email, authentication, and customer engagement.

## Articles

### [Twilio Video Media SDK Powers Smarter Customer Engagement](https://yomu.fyi/post/twilio-video-media-sdk-powers-smarter-customer-engagement.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Andy O'Dower
- Published: Oct 15, 2026
- Type: Announcement

Twilio launched the Twilio Video Media SDK in Public Beta, a server-side software package that connects applications to a Twilio Video Room as a secure virtual participant, streaming real-time audio and video to backend systems. This launch supports AI-enabled customer engagement by allowing teams to use consistent AI logic across chat, voice, and video channels while keeping sensitive data secure. The SDK enables use cases such as multimodal AI assistants that see and hear users, ambient healthcare documentation, remote verification with computer vision, and server-side compliance checks. By routing individual media tracks to a secure backend, the SDK supports HIPAA and GDPR requirements without client-side rendering. Early adopter GLOBO Language Solutions uses the SDK to enhance real-time quality and AI integration for patient care in healthcare environments.


### [How to Build a Voice AI Agent with OpenAI's GPT-Live, Twilio Agent Connect, and TypeScript](https://yomu.fyi/post/how-to-build-a-voice-ai-agent-with-openai-s-gpt-live-twilio-agent-conn-typescript.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Wen Zhu, Xinghao Huang
- Published: Oct 15, 2026
- Type: Tutorial

The post addresses the common problem of voice AI demos failing in production by introducing a solution using OpenAI’s GPT-Live and Twilio Agent Connect. GPT-Live is a full-duplex speech-to-speech model that separates conversation from background work, and Twilio Agent Connect provides a GPTLiveProvider to bridge Twilio Media Streams to GPT-Live without custom WebSocket plumbing. The tutorial walks through building a TypeScript application that connects inbound callers to a GPT-Live-powered voice agent, including setting up a Fastify server, configuring the session with a welcome instruction, and wiring tool calls via Responses delegation using a get\_weather example. It also covers placing outbound calls using the same provider and demonstrates features like per-call customization and transcript logging. The result is a production-ready voice agent that can greet callers, answer questions, and execute backend functions, with the same pattern applicable to scenarios like appointment booking or order status lookups.


### [What is agentic identity? Securing AI agents in 2026](https://yomu.fyi/post/what-is-agentic-identity-securing-ai-agents-in-2026.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Ravleen Kaur
- Published: Oct 15, 2026
- Type: Explainer

AI agents are shifting from passive copilots to autonomous actors that book tickets, update calendars, and send messages without step-by-step human intervention. This shift introduces operational risks because traditional security controls designed for deterministic software cannot handle non-deterministic agent behavior, leading to over-permissioned agents, rogue behavior, and lack of real-time monitoring. Agentic identity is proposed as a governance layer built on three pillars: authentication (cryptographic keys), authorization (contextual permissions), and context (delegated link to end user). The framework includes short-lived session tokens, user context binding via token exchange, hard operational bounds on tool calls, human-in-the-loop gateways for high-risk actions, verified communication endpoints, and centralized logging with kill switches. By implementing these controls, organizations can deploy autonomous agents safely while maintaining visibility, containment, and auditability across all agent actions.


### [How to Retrieve a Phone Number's SMS Pumping Score in Rust](https://yomu.fyi/post/how-to-retrieve-a-phone-number-s-sms-pumping-score-in-rust.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Oct 14, 2026
- Type: Tutorial

SMS Pumping Fraud exploits phone number input fields to generate revenue from SMS messages sent to numbers controlled by a specific mobile network operator. Twilio’s Lookup v2 API provides an SMS Pumping Risk Score from 0 to 100, based on a proprietary model using network data including Verify Fraud Guard signals and unusual traffic patterns. This Rust tutorial uses the rustlio crate, dotenvy, serde, and tokio to call the API and retrieve the score along with carrier risk category and block status. Canadian numbers do not return carrier information, and Twilio advises against using the score for US or Canadian numbers. Guidelines recommend sending messages for scores 0-60, adding friction for 60-75, treating as suspicious for 75-90, and blocking for 90-100.


### [Cyber Week Readiness: A Developer's Guide to Scalable Comms](https://yomu.fyi/post/cyber-week-readiness-a-developer-s-guide-to-scalable-comms.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Esther Balta
- Published: Oct 13, 2026
- Type: Explainer

Cyber Week compresses a year’s worth of system failures into 72 hours, making it the ultimate stress test for communication infrastructure. Developers must optimize APIs with rate limiting, caching, and traffic shaping to absorb sudden spikes without dropping connections. Email delivery requires early IP warmup, SPF/DKIM/DMARC configuration, and limiting promotional sends to recently engaged customers to maintain inbox placement. Voice pipelines need proactive capacity planning for Calls Per Second quotas, fallback URLs, and STIR/SHAKEN attestation to prevent fraud and dropped calls. Monitoring should use a unified dashboard with per-channel metrics, correlation IDs, and pre-written runbooks rehearsed in game days to turn inevitable failures into routine events.


### [Now in GA: Power Live Conversations with Segment Conversation Memory Integration](https://yomu.fyi/post/now-in-ga-power-live-conversations-with-segment-conversation-memory-in.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Valaree Landry
- Published: Oct 12, 2026
- Type: Announcement

Segment Conversation Memory Integration is now generally available, bridging Segment CDP profiles with Twilio’s low-latency conversational recall layer. The integration streams customer traits into live voice, SMS, WhatsApp, and Flex interactions in under 300 milliseconds. It eliminates the need for custom webhooks or middleware pipelines by providing a click-to-configure connector within Segment’s Destinations Catalog. Key benefits include sub-300ms latency, 10x to 15x lower LLM token costs by selectively syncing factual traits instead of raw JSON histories, and faster agent deployment. CarFinance247 used the integration to build an AI assistant that handles approximately 288,000 conversations and drives 1.6x faster lead conversions.


### [Unified Customer Communications: Twilio Voice, SMS, and WhatsApp meet Salesforce](https://yomu.fyi/post/unified-customer-communications-twilio-voice-sms-and-whatsapp-meet-sal.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Hadijah Creary
- Published: Oct 8, 2026
- Type: Announcement

Twilio announced general availability of its Salesforce Partner Contact Center Integration, embedding its global Super Network with over 4,800 direct carrier relationships into the native Salesforce workspace. The integration unifies omnichannel orchestration across voice, SMS, and WhatsApp using Twilio TaskRouter, routing conversations into Salesforce’s omnichannel widget while preserving existing skills-based routing rules and syncing agent presence across channels. Real-time event metadata streams into the widget before a call connects, showing recent customer activity and sentiment to reduce average handling times and eliminate repeated information requests. Carrier-grade telephony with native real-time transcription and recording splits caller and agent voices for precise transcriptions, sentiment scoring, and post-call summaries. By pairing Salesforce’s familiar interface with Twilio’s communications engine, the integration gives agents a seamless workspace with a single source of truth, eliminating tab-switching and lost context.


### [Building a Multi-Channel AI Agent with Twilio Conversations and eve](https://yomu.fyi/post/building-a-multi-channel-ai-agent-with-twilio-conversations-and-eve.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Marius Obert
- Published: Oct 8, 2026
- Type: Tutorial

Building a multi-channel AI agent that remembers customers across SMS and WhatsApp is challenging because most projects require a custom memory layer; Twilio Conversations and Vercel’s eve solve this by cleanly separating short-term and long-term memory. eve holds the per-conversation transcript, while Twilio’s Memory Store persists extracted facts across sessions using automatic observation extraction from Conversation Intelligence. The tutorial walks through provisioning an Orchestrator Configuration that stitches SMS and WhatsApp into one thread, wiring a dynamic instruction that merges both memory sources, and using ngrok for local webhook tunneling. The resulting agent remembers customer context across channels and sessions, allows model swapping in one line via the AI SDK, and extends cleanly to voice and RCS without bespoke persistence code. The full sample project is on GitHub at IObert/twilio-conversations-eve-agent, and the tutorial includes provisioning steps using curl, environment variable setup, and local testing with pnpm dev.


### [September 2026 Fraud Update: Phishing Trends, Third-party Safety and Latest Releases](https://yomu.fyi/post/september-2026-fraud-update-phishing-trends-third-party-safety-and-lat.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Dan Nieters, Rohit Agarwal, Alena Eissman
- Published: Oct 8, 2026
- Type: Announcement

Twilio’s Q3 2026 fraud update covers phishing trends, third-party safety, and new releases. Over 80% of phishing originating from SendGrid was due to account takeovers, with attacks centered on delivery service spoofing, invoice fraud, and targeted Japanese campaigns impersonating brands like Amazon and Mercari. Attackers used fabricated forwarded threads, typosquatted domains like tvvilio\[.\]org, familiar names, AI-generated email templates, and associated phone calls, sometimes spoofing Twilio’s help line. To secure third-party integrations, Twilio recommends scoping access strictly, practicing credential hygiene, and reviewing audit integrations regularly, and now recommends OAuth 2.0 Client Credentials over auth tokens or API keys for scoped short-lived tokens. New releases include IP ACL with Dry Run mode, which logs blocked requests without enforcement to prevent accidental lockouts before real enforcement.


### [Peak Season Deliverability: Why Quality Beats Quantity This Holiday Season](https://yomu.fyi/post/peak-season-deliverability-why-quality-beats-quantity-this-holiday-sea.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Adam Morales
- Published: Oct 7, 2026
- Type: Problem & solution

During Black Friday and Cyber Monday, email volume spikes, tempting senders to blast all contacts. However, sending to unengaged recipients leads to throttling, blocklists, and spam placement, which can delay time-sensitive holiday offers. Inbox providers use dynamic throughput based on real-time sender reputation; high engagement unlocks maximum sending velocity, while low engagement causes rate-limiting with 4xx deferrals, potentially delivering a 9 AM campaign at 2 AM. Senders with excellent engagement experience up to 100 times faster delivery than those ignoring best practices. Implementing strict sunset policies for contacts inactive 90-180 days, permission-based opt-ins, and automated verification via the SendGrid Email Validation API protects sender reputation and preserves control over campaign timing, avoiding blocklist events that take 24-72 hours to mitigate.


### [Avoid Sending SMS to Landlines in PHP with Twilio's Lookup v2 API](https://yomu.fyi/post/avoid-sending-sms-to-landlines-in-php-with-twilio-s-lookup-v2-api.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Oct 7, 2026
- Type: Tutorial

SMS has a 98% open rate and works without internet, but sending to landlines wastes money on failed deliveries. This tutorial demonstrates filtering landlines in PHP using Twilio’s Lookup v2 API, which provides line type intelligence via the “line\_type\_intelligence” field. The core class extends PHP’s FilterIterator and overrides the accept() method to fetch each number’s line type, returning true only for “mobile” types and catching TwilioException on failure. The application uses Composer dependencies including monolog, twilio/sdk, and phpdotenv, loads credentials from a .env file, iterates over an ArrayIterator of phone numbers, logs each with Monolog to stdout, and sends an SMS only to mobile numbers. This approach avoids unnecessary charges and is straightforward using Twilio’s PHP helper library and SPL iterators.


### [Avoid Sending SMS to Landlines with the Lookup v2 API and Go](https://yomu.fyi/post/avoid-sending-sms-to-landlines-with-the-lookup-v2-api-and-go.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Oct 7, 2026
- Type: Tutorial

Sending SMS to landlines causes failed deliveries and unnecessary charges, a problem that Twilio’s Lookup v2 API solves by identifying phone number types. The API’s line\_type\_intelligence field returns a classification such as “mobile” or “landline”, enabling applications to filter out non-mobile numbers before sending an SMS. This Go tutorial loads Twilio credentials from a .env file and uses Go 1.23’s iter package to create a custom iterator over a phone number list. Within the iterator, each number is validated by calling FetchPhoneNumber with the line\_type\_intelligence parameter, and if the type is not “mobile” or the call fails, the number is skipped. Only mobile numbers are then passed to the sendSMS function, which sends the message using the Twilio Go helper library’s CreateMessage, and the terminal finally logs each success or identifies a skipped landline.


### [My Voice AI Demo Was Hit by a $982 Traffic-Pumping Attack! Here’s What I Learned](https://yomu.fyi/post/my-voice-ai-demo-was-hit-by-a-982-traffic-pumping-attack-here-s-what-i.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Rishab Kumar
- Published: Oct 6, 2026
- Type: Incident / postmortem

A voice AI demo using Twilio Conversation Relay and FastAPI was exploited when automated clients repeatedly called its unauthenticated /api/call endpoint, generating 1,008 requests and 921 outbound calls to Israeli +972229 numbers. The incident cost $971.50 in Twilio voice usage and $10.58 in Google Gemini fees, matching International Revenue Sharing Fraud that keeps calls connected for per-minute revenue. The author used the Twilio CLI to group call records showing 920 of 921 calls targeted the same narrow Israeli range and correlated Azure Log Analytics to confirm the exploited endpoint. Calls were kept alive by automated scripts replaying conversation-extension prompts from only 541 distinct lines across 8,363 transcriptions, with some recordings mentioning happy trafficking. The post recommends authentication, duration limits, geographic permissions, signature validation, usage triggers, and demo isolation as essential controls for public voice AI apps.


### [How to design an AI agent for resolution instead of rapport](https://yomu.fyi/post/how-to-design-an-ai-agent-for-resolution-instead-of-rapport.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Jesse Sumrak
- Published: Oct 6, 2026
- Type: Problem & solution

Most conversation design guidance focuses on voice and tone, but consumers prioritize immediate issue resolution (40%), speed (40%), accuracy (38%), and 24/7 availability (38%) over rapport. The post recommends opening with capability, loading context before the first turn using persistent profiles, and designing a second option when the first fails. Escalation should be triggered by conversation rules like a second failed attempt or explicit request, not treated as an error condition. Confirmation turns should be cut except for irreversible actions, and agents should clearly state what they cannot do. An agent with customer history, a backup path, and a clean exit is more helpful than one with a carefully written persona but lacking those features.


### [Twilio Reaches Branded Calling Milestone Across AT&T, T-Mobile, and Verizon Networks](https://yomu.fyi/post/twilio-reaches-branded-calling-milestone-across-at-t-t-mobile-and-veri.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Melissa Blassingame, Robert McCulley, James Lapic
- Published: Oct 5, 2026
- Type: Announcement

Consumers rarely answer unknown numbers, causing legitimate business calls from pharmacies, banks, and delivery drivers to be ignored. Branded Calling addresses this by displaying a verified brand name, logo, and call reason on the recipient’s device to establish trust before the recipient decides to pick up. Twilio expanded Branded Calling to include AT&T (in pilot) alongside T-Mobile and Verizon, building on work since 2021 when they executed the first wireless call using Rich Call Data (RCD) over the PSTN authenticated with STIR/SHAKEN, and later documented the approach and brought the feature to general availability. Customer CareSignal, a healthcare engagement platform, saw a 21% increase in call answer rates. Twilio emphasizes that trust must extend beyond voice to channels like RCS, WhatsApp, Email, and Apple Messages for Business, so the same verified brand carries through every step.


### [How to Create and Send vCards with Go](https://yomu.fyi/post/how-to-create-and-send-vcards-with-go.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Oct 2, 2026
- Type: Tutorial

Sharing contact details by copying text between apps is ineffective compared to sending a vCard, a structured data format supported by major operating systems and email clients. This tutorial demonstrates creating vCards in Go using the go-vcard package, which handles fields such as formatted name, structured name, street address, telephone number, email address, and URL. The code writes the vCard to a .vcf file with version 4.0 using the go-vcard encoder and constants from the package, exiting on failure. The vCard file is uploaded to Twilio Assets, a static file hosting service bundled with every Twilio account, to make it publicly accessible for the SMS. The Twilio Go SDK sends an SMS with a message body and the vCard URL as a media attachment via the Programmable Messaging API, allowing recipients to open it in their contacts app.


### [How to Track Opt-Outs in PHP](https://yomu.fyi/post/how-to-track-opt-outs-in-php.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Oct 2, 2026
- Type: Tutorial

This tutorial demonstrates building a PHP application that records customer opt-out preferences from SMS replies using Twilio’s Incoming Message Webhook and Event Streams, which require PHP 8.5, Composer, and SQLite. When the SMS body is an opt-out keyword such as STOP, START, or HELP, Twilio includes an OptOutType parameter in the webhook request, which the application checks using strcasecmp and array\_first. The application, based on the Twilio Slim Base project, stores the opt-out status and account SID in an SQLite database via PHP-DB and laminas-servicemanager, using a TableGateway for the user\_optouts table. The handleWebhook() function validates the OptOutType against class constants (OPT\_OUT\_TYPE\_START, OPT\_OUT\_TYPE\_STOP, OPT\_OUT\_TYPE\_HELP) and inserts a record before returning a TwiML response. Twilio already blocks further messages for standard opt-outs, but local recording enables advanced actions like syncing a CRM; the tutorial covers bootstrapping, configuring Twilio messaging services with Advanced Opt-Out, using ngrok, and verifying with an SQL query.


### [How to Get Started With WebRTC: Intro to Browser APIs](https://yomu.fyi/post/how-to-get-started-with-webrtc-intro-to-browser-apis.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Jesse Sumrak
- Published: Oct 2, 2026
- Type: Tutorial

WebRTC provides browser APIs for real-time voice, video, and data sharing without plugins, with mandatory encryption via DTLS-SRTP and DTLS; the standard became a W3C Recommendation in January 2021. The core APIs are getUserMedia for capturing audio/video from user devices, RTCPeerConnection for peer-to-peer media exchange via offer/answer and ICE candidates, and RTCDataChannel for arbitrary data transfer. WebRTC is supported by all major browsers and used by services like Google Meet, Discord (which uses media servers for group calls to avoid expensive peer-to-peer), and AI voice agents. Twilio offers Video and Voice JavaScript SDKs that handle signaling and media relay, enabling calls to phone numbers and SIP endpoints. The post includes a camera preview example using getUserMedia that requires a secure origin and can be served with Python, then directs readers to Twilio’s quickstart tutorials for building video and voice applications.


### [Your customers don't want an AI friend. They want an answer.](https://yomu.fyi/post/your-customers-don-t-want-an-ai-friend-they-want-an-answer.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Jesse Sumrak
- Published: Oct 1, 2026
- Type: Problem & solution

A Twilio survey of 660 business leaders and consumers reveals a gap: 98% of organizations train AI to act more human, yet customers rank issue resolution, speed, accuracy, and availability above personality. Only 54% of consumers want human-like AI, versus 73% of brands. Behaviors customers call empathetic—acknowledging the specific situation, offering multiple solutions, using conversational language, offering compensation—depend on personalization and context, not tone. 51% of consumers find AI robotic, and 39% of businesses cite weak emotional understanding as a top dissatisfaction driver. The report recommends prioritizing context and personalization over personality, using tools like Twilio Conversation Memory and Conversation Orchestrator to make agents useful before charming.


### [Prioritize your messages at scale with the Twilio Traffic Optimization Engine](https://yomu.fyi/post/prioritize-your-messages-at-scale-with-the-twilio-traffic-optimization.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Will McKenzie
- Published: Oct 1, 2026
- Type: Announcement

Twilio’s Traffic Optimization Engine is a new suite for global messaging deliverability and prioritization, tackling carrier network strain from soaring volumes like the 6.9 billion messages during Cyber Week 2025. The suite automates months of manual planning, working across networks, senders, geographies, and use cases to deliver high-priority messages on time. Real-time Routing uses patented algorithms to optimize traffic across 4,800+ carrier connections every 75 seconds, while Market Throughput manages rate limits at the country and sender-type level to prevent throttling. Traffic Shaping creates dynamic lanes to prioritize one-time passwords over promotional messages, and Multitenancy fairly distributes throughput among ISV teams. Insights provides real-time analytics on deliverability and capacity allocation, and the overall system uses traffic shaping and priority queueing based on carrier, sender, and message type capabilities.


[Older posts](https://yomu.fyi/company/twilio/page/2.md)