Twilio
Connect Twilio to send SMS/MMS/WhatsApp, place and control voice calls, search and buy phone numbers, run Verify (OTP), Lookups, Messaging Services, Conversations, Content templates, and Studio. All of Twilio from one connection.
You end up pasting two values Twilio shows together under API Credentials in Workbench: your Account SID (starts with AC) and the matching Auth Token.
- Setup time
- 3 min
- Auth
- API credentials
- API base URL
- https://api.twilio.com/2010-04-01
- Rate limits
- Twilio publishes no single global limit. Rate and concurrency caps are per product, and exceeding them returns 429 Too Many Requests. The Twilio-Concurrent-Requests response header shows current concurrency.
Before you begin
- Twilio account, including a free trial account with its sending restrictions
- Console sign-in with the Owner or Administrator role, because the Auth Token is hidden from users without account-admin permissions
- If you use subaccounts, know which subaccount PopMCP should be locked to. Each subaccount has its own SID and Auth Token.
Get your credentials
Sign in to the Twilio Console
Go to console.twilio.com and sign in. Both credentials sit in Workbench, the panel docked at the bottom of every Console page.
Confirm which account you are connecting
Open the account switcher in the top bar and check the friendly name. If you run subaccounts, switch to the exact subaccount PopMCP should act on.
Account Dashboard
Overview of this Twilio account and its subaccounts.
| Friendly name | Account SID | Type | Status |
|---|---|---|---|
| My first Twilio accountOwner | ACb3f1a2****9e42 | Parent | Active |
| StagingSubaccount | AC77c04d****1b08 | Subaccount | Active |
| SandboxSubaccount | AC91be55****7cd3 | Subaccount | Suspended |
Each subaccount carries its own Account SID and Auth Token. Copy the pair that belongs together.
Open Workbench and copy the Account SID
Click the Workbench tab at the bottom of the Console and stay on the Overview tab. Under API Credentials, copy the Account SID and paste it into the PopMCP Account SID field.
Workbench
Credentials, debugger and alarms, docked to every Console page.
- Account SID
- ACb3f1a2****9e42
- Auth Token
- ••••••••••••••••••••••••
- Region
- US1
A Quick Actions row under the credentials links to Home, Messaging, Phone Numbers, API keys, Debugger, Usage and Docs.
Reveal and copy the Auth Token
In the same API Credentials block, click the eye icon beside Auth Token to reveal it, then click the copy icon. Paste the value into the PopMCP Auth Token field.
Workbench
Credentials, debugger and alarms, docked to every Console page.
- Account SID
- ACb3f1a2****9e42
- Auth Token
- 7f2c****a91d
- Region
- US1
Hide the token again once it is on the clipboard.
Paste both values into PopMCP
Fill Account SID and Auth Token in PopMCP and click Save. PopMCP fills the SID into the \{AccountSid\} segment of every core Twilio API path for you.
Connect in PopMCP
Open your workspace, choose Twilio in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| Account SIDtext | On the Twilio Console homepage (console.twilio.com), under 'Account Info'. Starts with 'AC'. Used as the HTTP Basic username and auto-filled into the {AccountSid} of every core API path so you never pass it to a tool. |
| Auth Tokensecret | On the Twilio Console homepage next to the Account SID (click to reveal). Sent as the HTTP Basic password over HTTPS, stored encrypted, used server-side only. The connection is locked to this account. Tip: for tighter security you can rotate this Auth Token any time in the Console.Encrypted with AES-256-GCM on save and never shown again. |
PopMCP verifies the credential against Twilio immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP shows the Twilio connector as Connected and displays the friendly name of the account, for example "My first Twilio account". Asking for your Twilio phone numbers returns the numbers owned by that account.
Troubleshooting
401 Unauthorized, error 20003 Authenticate
Why: The Auth Token does not match the Account SID, or the token was rotated after you copied it.
Fix: Re-copy both values from the same Workbench API Credentials block in one sitting, then save the connection again.
The Auth Token has been shared or leaked
Why: A full-account credential in the wrong hands can send messages and buy numbers on your bill.
Fix: Go to **Settings** then **Account settings** then **API keys & auth tokens** and issue a new primary Auth Token. In the legacy Console the same page is **Admin** then **Account management** then **Keys & credentials** then **API keys & tokens**. Reconnect PopMCP with the new value.
404 on every request, or Console resources appear to be missing
Why: You copied the parent account SID but the resources live in a subaccount, or the reverse.
Fix: Switch to the correct subaccount in the account switcher and copy that subaccount's SID and Auth Token.
Error 21608, the number is unverified
Why: The account is still a trial account, which can only message or call numbers you have verified.
Fix: Verify the destination number in the Console, or upgrade the Twilio account.
429 Too Many Requests
Why: Per-product rate or concurrency limits were exceeded.
Fix: Slow the calls down, watch the Twilio-Concurrent-Requests response header, and retry after a short backoff.