Application SMS messaging (TenancyEngine)
Send general-purpose outbound SMS from a real phone number, and receive inbound replies through your application's registered webhook endpoints. This is separate from SMS 2FA (Sign-up tab), which only covers one-time login codes for your end-users.
Console: Application workspace → SMS (/applications/:id/sms)
Requires Applications configure to enable messaging or set/remove credentials. Read-only access shows current status.
Two ways to send
- Platform-managed subaccount (recommended default). Click Enable platform-managed SMS to provision a dedicated Twilio subaccount, phone number, and Messaging Service for this application — isolated from every other application's sending reputation and billing. This purchases a real phone number with a recurring cost, so it's a deliberate action, not automatic.
- Bring your own Twilio account (BYOK). Already have a Twilio account? Enter your Account SID, auth token, and an existing Messaging Service SID. TenancyEngine verifies the credentials against Twilio before saving — a bad token is rejected immediately, not silently stored. BYOK takes precedence over a platform-managed subaccount whenever both are configured, and your Twilio account is billed directly rather than the platform's.
Your auth token is encrypted at rest and is never returned by any API response, here or anywhere else — to change it, remove the credential and enter a new one.
Receiving inbound SMS
Inbound messages to your number are delivered to any of this application's webhook endpoints subscribed to the sms.inbound_message event (or subscribed to *). No separate inbound configuration is needed — register or reuse a webhook endpoint the same way you would for any other event, and Twilio replies to end-users are handled automatically (including STOP/opt-out keyword detection).
The delivered payload includes the message SID, sender/recipient numbers, body, media count, and channel (SMS or WhatsApp) — verified with the same X-TE-Signature HMAC scheme as every other application webhook.
Related
- Application webhooks — subscribe to
sms.inbound_messageto receive inbound SMS - Application sign-up — SMS 2FA / one-time login codes (a separate, free Twilio Verify subaccount)