Deadline Extended: GET Requests With Body for Authy API Now Rejected on Jan 15, 2026

Ahoy!

​​On May 8, 2025, Twilio sent an advisory to some customers outlining an upcoming change to the Twilio Verify V1/Authy API endpoints. This change, initially planned for June 16, 2025, would stop accepting GET requests that include a request body. The goal is to enhance security and better protect against smuggling attacks.

To ensure a smooth transition and give customers more time to update their integrations, Twilio is extending the deadline for this change to January 15, 2026.

What customers need to do:

• Update any GET requests that include a request body to either remove the body or use the correct HTTP method (such as POST).

• If third-party integrations are involved, confirm with those providers to ensure they are aware of and preparing for this change.

Thank you for building with Twilio! 

–Team Twilio