Twilio Verify for AI Agent Authentication: OTP, Passkeys, A2H (2026)

TL;DR — Verify supports SMS, Voice, Email, WhatsApp, TOTP, and Passkeys via one API. For voice AI, the right pattern is "speak the OTP" via SMS while the agent waits, or use the new A2H protocol for cryptographic, auditable agent-to-human auth.

Background

Twilio Verify is the OTP and identity API. In 2026 Twilio also shipped A2H (Agent-to-Human) — an open spec that gives AI agents a channel-agnostic, signed, auditable way to authenticate to their human principal (Passkeys / WebAuthn). For HIPAA-grade voice AI, you want both: Verify for the customer, A2H for the agent acting on the customer's behalf.

Architecture / config

flowchart TD
 CALL[Caller dials AI] --> AI[AI agent answers]
 AI -->|sensitive intent| START[Verify Start]
 START --> SMS[OTP via SMS]
 CALLER[Caller types code] --> AI
 AI -->|/Check| VERIFY[Twilio Verify]
 VERIFY -->|approved| TOOL[Read PHI / charge card]
 VERIFY -->|denied| ESC[Escalate or end]

CallSphere implementation

CallSphere's Healthcare agent (Twilio + FastAPI :8084 → OpenAI Realtime) requires Verify before reading any PHI. Flow:

1. AI confirms last 4 of phone + DOB.
2. AI says "I'm texting you a 6-digit code — read it back to me."
3. Backend hits Verify.create({ to, channel: 'sms' }).
4. Caller speaks code; STT captures; backend hits Verify.check({ to, code }).
5. On approved, the agent unlocks PHI tools.

Explore a live demo and compare current plans to find the right fit for your business.

Build steps with code

// AI tool: start_verify
const v = await twilio.verify.v2.services(SERVICE_SID).verifications.create({ to: e164, channel: "sms" });

// AI tool: check_verify
const r = await twilio.verify.v2.services(SERVICE_SID).verificationChecks.create({ to: e164, code });
if (r.status !== "approved") throw new Error("auth_failed");

// Tool schema exposed to OpenAI Realtime
{
 "name": "start_verify",
 "description": "Send a 6-digit OTP to the caller via SMS",
 "parameters": { "type": "object", "properties": { "phone": { "type": "string" } } }
}

Pitfalls

• Reading the code aloud — never have the AI read the code; only the human reads it back.
• STT confusion — "0" vs "oh", "double 5" vs "55". Force digit-only re-prompt on low confidence.
• Rate limits — Verify caps at 5 sends per phone per 24 h by default. Whitelist test numbers.
• Region — match your Verify service region to the caller country to avoid SMS deliverability issues.
• Audit — log only status and sid, never the OTP itself.

FAQ

Q: Can I use Voice channel for OTP? Yes — Verify can call and read the code aloud. Adds latency but works on landlines.

Q: Passkeys for AI? Yes — A2H supports WebAuthn for the AI-agent-to-user binding.

Q: Email OTP cost? ~$0.05 per success in 2026 pricing. Cheaper than SMS for non-PSTN flows.

Q: TOTP for repeat callers? Yes — bind a TOTP factor on first verified call; subsequent calls only ask for the 6-digit code.

Q: Does Verify count as "reasonable assurance" for HIPAA? Combined with caller-ID match + DOB, yes — most BAAs treat Verify as a recognized step-up.

Sources

• Twilio Verify API docs
• Twilio Verify product page
• Twilio Blog — A2H Protocol
• Twilio User Authentication & Identity

Twilio Verify for AI Agent Authentication: OTP, Passkeys, A2H (2026): production view

Twilio Verify for AI Agent Authentication: OTP, Passkeys, A2H (2026) usually starts as an architecture diagram, then collides with reality the first week of pilot. You discover that vector store choice (ChromaDB vs. Postgres pgvector vs. managed) is not really a vector store choice — it's a latency, freshness, and ops choice. Picking wrong forces a re-platform six months in, exactly when you have customers depending on it.

Serving stack tradeoffs

The big fork is managed (OpenAI Realtime, ElevenLabs Conversational AI) versus self-hosted on GPUs you operate. Managed wins on cold-start, model freshness, and zero-ops; self-hosted wins on unit economics past a certain conversation volume and on data residency for regulated verticals. CallSphere runs hybrid: Realtime for live calls, self-hosted Whisper + a hosted LLM for async, both routed through a Go gateway that enforces per-tenant rate limits.

Latency budgets are non-negotiable on voice. End-to-end target is sub-800ms ASR-to-first-token and sub-1.4s first-audio-out; anything beyond that and turn-taking feels stilted. GPU residency in the same region as your TURN servers matters more than choosing a slightly bigger model.

Observability is the unglamorous backbone — every conversation produces logs, traces, sentiment scoring, and cost attribution piped to a per-tenant dashboard. HIPAA aligned isolation keeps healthcare traffic separated from salon traffic at the storage layer, not just the API.

FAQ

Is this realistic for a small business, or is it enterprise-only? The healthcare stack is a concrete example: FastAPI + OpenAI Realtime API + NestJS + Prisma + Postgres healthcare_voice schema + Twilio voice + AWS SES + JWT auth, all HIPAA aligned. For a topic like "Twilio Verify for AI Agent Authentication: OTP, Passkeys, A2H (2026)", that means you're not starting from scratch — you're configuring an agent template that's already been hardened across thousands of conversations.

Which integrations have to be in place before launch? Day one is integration mapping (scheduler, CRM, messaging) and prompt tuning against your top 20 real call transcripts. Day two through five is shadow-mode running, where the agent transcribes and recommends but a human still answers, so you can compare side-by-side. Go-live is the moment your eval pass-rate clears your internal bar.

How do we measure whether it's actually working? The honest answer: it scales until your tool catalog gets stale. The agent is only as good as the integrations it can actually call, so the operational discipline is keeping schemas, webhooks, and fallback paths green. The platform handles the rest — observability, retries, multi-region routing — without your team owning the GPU layer.

Talk to us

Explore a live demo and compare current plans to find the right fit for your business.