twilio-webhooks
Installation
SKILL.md
Twilio Webhooks
When to Use This Skill
- How do I receive Twilio webhooks?
- How do I verify Twilio webhook signatures (X-Twilio-Signature)?
- How do I handle incoming SMS or voice calls with Twilio?
- How do I process message status callbacks (queued, sent, delivered, failed)?
- Why is my Twilio webhook signature verification failing?
- Setting up Twilio webhook handlers for SMS, voice, WhatsApp, or recordings
- Debugging Twilio signature verification with form-encoded or JSON bodies
Essential Code (USE THIS)
Twilio signs every webhook with X-Twilio-Signature using HMAC-SHA1 (base64). The signing key is your Twilio Auth Token. Twilio sends most webhooks as application/x-www-form-urlencoded, so the SDK is the recommended way to verify — it handles both form and JSON variants.