Release identity
SHA-256 of the pack file bytes: 913eef5027420a31327c7d08c15719d2ab7c14685ac1e60b3406c5fccdae961f
Distributable: digest matches the release manifest. The binary carries a digest-bound manifest of the distributable library; a pack whose bytes differ from its manifest entry — endpoint, tier, allowlist, or credential edited, with provider, version, and review block preserved — fails the digest check, loses distributability, and renders MODIFIED rather than as the shipped reviewed artifact. Review state and artifact status are different facts: the first is a documentation-review declaration, the second is the identity of the exact bytes.
Capabilities (4)
twilio.messages.read v1.0.0R0
- Action
- read
- Endpoint
GET https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/Messages.json- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
Read the account's message log. Message bodies and the numbers at both ends are personal data, so the read is registered at the pii class. ACCOUNT_SID is a placeholder to replace before enabling.
twilio.messages.send v1.0.0R3
- Action
- send
- Endpoint
POST https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/Messages.json- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
Send an SMS. A message cannot be unsent, and send is one of the IRREVERSIBLE ACTIONS (delete, send, pay, deploy, approve, share and transfer), which is why it carries the R3 floor. The recipient's number is personal data and the body may carry more, so the capability registers at the pii class.
twilio.numbers.read v1.0.0R0
- Action
- read
- Endpoint
GET https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/IncomingPhoneNumbers.json- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
List the phone numbers the account holds. Phone numbers are personal data, so the read is registered at the pii class. ACCOUNT_SID is a placeholder to replace before enabling.
twilio.calls.create v1.0.0R3
- Action
- send
- Endpoint
call https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/Calls.json- Connector
- telephony
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
Place an outbound call. A call reaches a person and cannot be taken back, so the action is send at the R3 floor; send is one of the IRREVERSIBLE ACTIONS (delete, send, pay, deploy, approve, share and transfer). The telephony connector refuses a call whose request carries no consent record reference, and the dialed number must be in this capability's egress allowlist: replace '+1REPLACE-WITH-CONSENTED-NUMBER' with the real consented E.164 numbers, because the placeholder passes nothing. ACCOUNT_SID is a placeholder to replace before enabling.
Credential reference
The pack names a reference, never a secret. Installing a pack registers capabilities and makes them governable; registration is not connectivity. The credential is created at the provider and held in the client's own secret manager under the reference the pack names, and deployment testing is still required to show the credential path works and cannot be bypassed.
- Reference
secret-ref-twilio-auth-token- Custody
- customer_vault
- Injection
- header (Authorization)
The Twilio account's HTTP Basic credential — an API key pair or the account SID and auth token — held in the client's own secret manager. Twilio authenticates the REST API with HTTP Basic, so the stored material must be the complete Authorization header value (scheme included): 'Basic ' followed by the base64 of ACCOUNT_SID:AUTH_TOKEN (or the API key SID and secret). Prefer an API key over the account auth token: a key can be revoked without rotating the account's root credential.
Resources
twilio-account(api, pii):https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SIDtwilio-phone-number(number, pii):tel:+1REPLACE-WITH-TWILIO-NUMBER
Pack notes and exclusions
Use a Twilio API key or the account auth token with only the access these capabilities need; the pack does not create one. Sending an SMS and placing a call both reach a person outside AAES's control and cannot be taken back, so both carry the send action at the R3 floor, and send is one of the IRREVERSIBLE ACTIONS (delete, send, pay, deploy, approve, share and transfer). SMS is registered over the HTTP connector because the telephony connector models calls, not messages; the call capability uses the telephony connector, which refuses any call whose request carries no consent record reference, and whose dialed number must itself be in the capability's egress allowlist — the '+1REPLACE-WITH-CONSENTED-NUMBER' entry is a placeholder that passes nothing until the reviewer replaces it with the real consented E.164 numbers, so this capability fails closed as shipped. ACCOUNT_SID is a placeholder to replace in every endpoint. Message bodies and phone numbers are personal data, so the pack registers at the pii class throughout; it says nothing about Twilio Verify, Lookup, recordings or transcription, which carry their own data classes. AAES has not been certified by Twilio; the endpoints here are a reviewable default, not a vendor guarantee.
Review record
Review completed: 2026-09-20 · Reviewer: aaes-eng (an opaque id that resolves internally to the responsible reviewer)
- https://www.twilio.com/docs/messaging/api/message-resource (retrieved 2026-09-20)
- https://www.twilio.com/docs/voice/api/call-resource (retrieved 2026-09-20)
- https://www.twilio.com/docs/phone-numbers/api/incomingphonenumber-resource (retrieved 2026-09-20)
- https://www.twilio.com/docs/iam/api-keys (retrieved 2026-09-20)
A pack review is not a vendor or examiner attestation. A retrieval date says when a source page was read; it does not by itself establish what the page said then. No pack is vendor-endorsed, and none has been connectivity-tested against a live vendor tenant.