Official

Twilio Labs MCP Server

Twilio public APIs accessed directly through Model Context Protocol server tools.

Data last scanned today · Reviewed yesterday

55108TypeScriptMIT

Overview

This monorepo provides an MCP server implementation that exposes Twilio's public API suite to AI assistants. It includes two primary packages: a dedicated MCP server for Twilio services and an OpenAPI-based server for interacting with specified API documentation. Users can filter exposed functionality using services or tags to better manage LLM context window constraints. The tool is installed via npx by providing Twilio account SID and API credentials. Developers can further refine the integration by specifying paths to OpenAPI spec files or restricting the scope of accessible APIs to improve performance and manageability.

Our verdict

This server carries a high-risk rating with a security score of 22/100. The primary security concern is the total absence of an authentication method, meaning any local configuration access grants full control over your Twilio resources. Furthermore, the repository is community-maintained and lacks editorial review, placing the burden of security on the user to follow the ETI team's recommendation of isolating it from other MCP servers. It should only be used in highly controlled, non-sensitive environments.

  • Includes documentation for configuration of services and tags
  • Zero direct dependencies reduces the supply-chain footprint
  • Licensed under the MIT license
  • No authentication method implemented for user verification
  • Community-maintained project rather than an official Twilio release
  • Last commit occurred over five months ago
  • Exposes full write access without read-only mode options

Setup

Claude Desktop
{
  "mcpServers": {
    "twilio-labs-mcp": {
      "args": [
        "-y",
        "@twilio-alpha/mcp-monorepo"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

What credentials are required to connect the Twilio MCP server?

You must provide your Twilio Account SID along with your API Key and API Secret in the format YOUR_ACCOUNT_SID/YOUR_API_KEY:YOUR_API_SECRET.

How can I limit the number of APIs exposed to the AI model?

You can use the --services and --tags configuration parameters to filter and load only specific APIs, which also helps mitigate issues related to LLM context size limitations.

What security precautions should I take when using this server?

The ETI team recommends avoiding the installation of community MCP servers alongside official ones to prevent potential injection attacks that could lead to unauthorized access to your Twilio account.

Are there different packages available within this repository?

Yes, the repository contains two packages: an MCP server specifically for Twilio's public API and an OpenAPI MCP server that serves files based on a provided OpenAPI specification.

Where can I find documentation on how to generate Twilio API credentials?

Information on how to locate or create your Twilio API Key and Secret can be found in the official Twilio API Keys documentation.

Alternatives

Changelog

Badge

Twilio Labs MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.