Handle inbound Twilio SMS and voice webhooks

POST

/api/v1/webhooks/twilio

• Production
• Local development

Verifies X-Twilio-Signature, processes STOP keywords into consent revocation, and emits specific event types (CONTACT_TOUCH_INBOUND, PHONE_CALL_ENDED, CONTACT_OPTED_OUT). Returns 200 once the signature verifies so Twilio does not retry; an unsigned, forged or unverifiable request is rejected instead.

Authorizations

• ApiKeyAuth

Responses

200

Successful Response

Generic webhook acknowledgement response.

Attributes: received: Always True when the webhook was accepted. status: Optional status string (e.g. “duplicate” for idempotent replay).

object

received

boolean

default: true

status

Any of:

string

string

null

null