Studio-generated API Keys

Twilio Studio workflows make requests to Twilio REST APIs on behalf of your Twilio account. To achieve this, Studio auto-generates an API Key in your account during your very first Flow Execution. This API Key is named "Studio API Key" and is visible to you in Twilio Console.

During Flow Execution, if a Studio widget needs to make a request to a Twilio API, such as sending an SMS via the Send Message widget, Studio uses the Studio API Key to authenticate that API request.

Because the Studio API Key is automatically generated, you never need to provide your Twilio Auth Token to Studio. If the Studio API Key is deleted from your account, Studio will automatically generate a new one during Flow Execution to ensure no loss of functionality in your Studio Flows.

Audit Events

When Studio generates the API Key, Twilio Enterprise customers who use Audit Events will see log entries for the API Key and its related Account Credential.

Example Audit Events:

account-api-keys.created - Friendly Name: Studio API Key
account-credentials.created - Friendly Name: Studio API Key; Type: Twilio Signing Key

Studio supports the following event types:

flow.created
flow.deleted
flow.updated

As part of the Audit Events, Studio sends the following fields:

Event Date
Event Sid (Account SID)
Resource Type (Flow)
Resource Sid (Flow SID)
Event Type (flow.created, flow.deleted, or flow.updated)
Source (Web/API)
Source IP (Source who made the changes)
Actor (User SID/Account SID)
Region

Multiple Studio API Keys

You might notice two Studio API Keys in your account's API Key list. A 2022 migration of active Flow events to a new data store auto-created a second API Key for existing Studio customers during their first Execution in the new data store. The older Studio API Key is no longer used, and you can delete it from your list in Twilio Console.