Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Telnyx Oauth - curl · team-telnyx | DecimalAI

team-telnyx/telnyx-oauth-curl

SkillScore100Maintained

Implement OAuth 2.0 authentication flows for Telnyx API access. This skill provides REST API (curl) examples.

codingby team-telnyx

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Coding pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/team-telnyx-telnyx-oauth-curl/SKILL.md

decimalai skills pull team-telnyx-telnyx-oauth-curl --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/team-telnyx-telnyx-oauth-curl/SKILL.md https://app.decimal.ai/s/team-telnyx-telnyx-oauth-curl/SKILL.md

Raw file: /s/team-telnyx-telnyx-oauth-curl/SKILL.md ↗ · machine-readable summary at /s/team-telnyx-telnyx-oauth-curl.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 7d ago

Yes — +55% lift · at higher cost+247% tokens0% turns100% of whole cases pass with skill (22/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-02	✗→✓	▲ Improved	194%	0%
case-03	✗→✓	▲ Improved	58%	0%
case-04	✗→✓	▲ Improved	274%	0%
case-05	✗→✓	▲ Improved	278%	0%
case-08	✗→✓	▲ Improved	324%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

team-telnyx / ai

skills/telnyx-oauth-curl/SKILL.md

View on GitHub ↗

License MITImported 8/10/2026Version v1

Skill contents

SKILL.md

Telnyx Oauth - curl

Installation

text
# curl is pre-installed on macOS, Linux, and Windows 10+

Setup

bash
export TELNYX_API_KEY="YOUR_API_KEY_HERE"

All examples below use $TELNYX_API_KEY for authentication.

Error Handling

All API calls can fail with network errors, rate limits (429), validation errors (422), or authentication errors (401). Always handle errors in production code:

bash
# Check HTTP status code in response
response=$(curl -s -w "\n%{http_code}" \
  -X POST "https://api.telnyx.com/v2/messages" \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"to": "+13125550001", "from": "+13125550002", "text": "Hello"}')

http_code=$(echo "$response" | tail -1)
body=$(echo "$response" | sed '$d')

case $http_code in
  2*) echo "Success: $body" ;;
  422) echo "Validation error — check required fields and formats" ;;
  429) echo "Rate limited — retry after delay"; sleep 1 ;;
  401) echo "Authentication failed — check TELNYX_API_KEY" ;;
  *)   echo "Error $http_code: $body" ;;
esac

Common error codes: 401 invalid API key, 403 insufficient permissions, 404 resource not found, 422 validation error (check field formats), 429 rate limited (retry with exponential backoff).

Important Notes

Pagination: List endpoints return paginated results. Use page[number] and page[size] query parameters to navigate pages. Check meta.total_pages in the response.

Authorization server metadata

OAuth 2.0 Authorization Server Metadata (RFC 8414)

GET /.well-known/oauth-authorization-server

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/.well-known/oauth-authorization-server"

Returns: authorization_endpoint (uri), code_challenge_methods_supported (arraystring]), grant_types_supported (arraystring]), introspection_endpoint (uri), issuer (uri), jwks_uri (uri), registration_endpoint (uri), response_types_supported (arraystring]), scopes_supported (arraystring]), token_endpoint (uri), token_endpoint_auth_methods_supported (arraystring])

Protected resource metadata

OAuth 2.0 Protected Resource Metadata for resource discovery

GET /.well-known/oauth-protected-resource

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/.well-known/oauth-protected-resource"

Returns: authorization_servers (arraystring]), resource (uri)

OAuth authorization endpoint

OAuth 2.0 authorization endpoint for the authorization code flow

GET /oauth/authorize

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/oauth/authorize?scope=admin"

Get OAuth consent token

Retrieve details about an OAuth consent token

GET /oauth/consent/{consent_token}

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/oauth/consent/{consent_token}"

Returns: client_id (string), logo_uri (uri), name (string), policy_uri (uri), redirect_uri (uri), requested_scopes (arrayobject]), tos_uri (uri), verified (boolean)

Create OAuth grant

Create an OAuth authorization grant

POST /oauth/grants — Required: allowed, consent_token

bash
curl \
  -X POST \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "allowed": true,
  "consent_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.example"
}' \
  "https://api.telnyx.com/v2/oauth/grants"

Returns: redirect_uri (uri)

Token introspection

Introspect an OAuth access token to check its validity and metadata

POST /oauth/introspect — Required: token

bash
curl \
  -X POST \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.example"
}' \
  "https://api.telnyx.com/v2/oauth/introspect"

Returns: active (boolean), aud (string), client_id (string), exp (integer), iat (integer), iss (string), scope (string)

JSON Web Key Set

Retrieve the JSON Web Key Set for token verification

GET /oauth/jwks

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/oauth/jwks"

Returns: keys (arrayobject])

Dynamic client registration

Register a new OAuth client dynamically (RFC 7591)

POST /oauth/register

Optional: client_name (string), grant_types (arraystring]), logo_uri (uri), policy_uri (uri), redirect_uris (arraystring]), response_types (arraystring]), scope (string), token_endpoint_auth_method (enum: none, client_secret_basic, client_secret_post), tos_uri (uri)

bash
curl \
  -X POST \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  -H "Content-Type: application/json" \
  "https://api.telnyx.com/v2/oauth/register"

Returns: client_id (string), client_id_issued_at (integer), client_name (string), client_secret (string), grant_types (arraystring]), logo_uri (uri), policy_uri (uri), redirect_uris (arraystring]), response_types (arraystring]), scope (string), token_endpoint_auth_method (string), tos_uri (uri)

OAuth token endpoint

Exchange authorization code, client credentials, or refresh token for access token

POST /oauth/token — Required: grant_type

Optional: client_id (string), client_secret (string), code (string), code_verifier (string), redirect_uri (uri), refresh_token (string), scope (string)

bash
curl \
  -X POST \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "grant_type": "client_credentials"
}' \
  "https://api.telnyx.com/v2/oauth/token"

Returns: access_token (string), expires_in (integer), refresh_token (string), scope (string), token_type (enum: Bearer)

List OAuth clients

Retrieve a paginated list of OAuth clients for the authenticated user

GET /oauth_clients

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/oauth_clients"

Returns: allowed_grant_types (arraystring]), allowed_scopes (arraystring]), client_id (string), client_secret (string | null), client_type (enum: public, confidential), created_at (date-time), logo_uri (uri), name (string), org_id (string), policy_uri (uri), record_type (enum: oauth_client), redirect_uris (arraystring]), require_pkce (boolean), tos_uri (uri), updated_at (date-time), user_id (string)

Create OAuth client

Create a new OAuth client

POST /oauth_clients — Required: name, allowed_scopes, client_type, allowed_grant_types

Optional: logo_uri (uri), policy_uri (uri), redirect_uris (arraystring]), require_pkce (boolean), tos_uri (uri)

bash
curl \
  -X POST \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "My OAuth client",
  "allowed_scopes": [
    "admin"
  ],
  "client_type": "public",
  "allowed_grant_types": [
    "client_credentials"
  ]
}' \
  "https://api.telnyx.com/v2/oauth_clients"

Returns: allowed_grant_types (arraystring]), allowed_scopes (arraystring]), client_id (string), client_secret (string | null), client_type (enum: public, confidential), created_at (date-time), logo_uri (uri), name (string), org_id (string), policy_uri (uri), record_type (enum: oauth_client), redirect_uris (arraystring]), require_pkce (boolean), tos_uri (uri), updated_at (date-time), user_id (string)

Get OAuth client

Retrieve a single OAuth client by ID

GET /oauth_clients/{id}

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/oauth_clients/550e8400-e29b-41d4-a716-446655440000"

Returns: allowed_grant_types (arraystring]), allowed_scopes (arraystring]), client_id (string), client_secret (string | null), client_type (enum: public, confidential), created_at (date-time), logo_uri (uri), name (string), org_id (string), policy_uri (uri), record_type (enum: oauth_client), redirect_uris (arraystring]), require_pkce (boolean), tos_uri (uri), updated_at (date-time), user_id (string)

Update OAuth client

Update an existing OAuth client

PUT /oauth_clients/{id}

Optional: allowed_grant_types (arraystring]), allowed_scopes (arraystring]), logo_uri (uri), name (string), policy_uri (uri), redirect_uris (arraystring]), require_pkce (boolean), tos_uri (uri)

bash
curl \
  -X PUT \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  -H "Content-Type: application/json" \
  "https://api.telnyx.com/v2/oauth_clients/550e8400-e29b-41d4-a716-446655440000"

Returns: allowed_grant_types (arraystring]), allowed_scopes (arraystring]), client_id (string), client_secret (string | null), client_type (enum: public, confidential), created_at (date-time), logo_uri (uri), name (string), org_id (string), policy_uri (uri), record_type (enum: oauth_client), redirect_uris (arraystring]), require_pkce (boolean), tos_uri (uri), updated_at (date-time), user_id (string)

Delete OAuth client

Delete an OAuth client

DELETE /oauth_clients/{id}

bash
curl \
  -X DELETE \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  "https://api.telnyx.com/v2/oauth_clients/550e8400-e29b-41d4-a716-446655440000"

List OAuth grants

Retrieve a paginated list of OAuth grants for the authenticated user

GET /oauth_grants

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/oauth_grants"

Returns: client_id (string), created_at (date-time), id (uuid), last_used_at (date-time), record_type (enum: oauth_grant), scopes (arraystring])

Get OAuth grant

Retrieve a single OAuth grant by ID

GET /oauth_grants/{id}

bash
curl -H "Authorization: Bearer $TELNYX_API_KEY" "https://api.telnyx.com/v2/oauth_grants/550e8400-e29b-41d4-a716-446655440000"

Returns: client_id (string), created_at (date-time), id (uuid), last_used_at (date-time), record_type (enum: oauth_grant), scopes (arraystring])

Revoke OAuth grant

Revoke an OAuth grant

DELETE /oauth_grants/{id}

bash
curl \
  -X DELETE \
  -H "Authorization: Bearer $TELNYX_API_KEY" \
  "https://api.telnyx.com/v2/oauth_grants/550e8400-e29b-41d4-a716-446655440000"

Returns: client_id (string), created_at (date-time), id (uuid), last_used_at (date-time), record_type (enum: oauth_grant), scopes (arraystring])

Want to see if team-telnyx/telnyx-oauth-curl would activate on your phrasing? Try it before you install — no LLM call, no signup.

Latest benchmark · publisher runVerified

8/22/2026, 13:59 UTC · 22 cases

Lift

+55%

100% vs 45%

Agent turns

0%

1.0 vs 1.0

Tokens

+247%

4,416.36 vs 1,273.23

fail → pass · 12pass → pass · 10

Per-case results (22)

Case	Status	Duration (ms)			Turns			Tokens			Tool calls
Case	Status	Without	With	Δ	Without	With	Δ	Without	With	Δ	Without	With	Δ
case-09 Show me the cURL command to remove a Telnyx OAuth client having ID '550e8400-e29b-41d4-a716-446655440000'.	pass→pass	3,378	2,337	-31%	1	1	0%	660	4,156	+530%	0	0	—
case-18 Write a bash script snippet using cURL to call Telnyx API that extracts HTTP response status code into a variable and uses a case statement to output distinct messages for status codes 401, 422, and 429.	pass→pass	6,233	4,663	-25%	1	1	0%	1,216	4,619	+280%	0	0	—
case-01 I need a cURL command to register a new public OAuth client named 'Mobile App' on Telnyx. The client should support the client_credentials grant type and the admin scope. Please provide the exact bash command using my TELNYX_API_KEY environment variable for authentication.	pass→pass	4,392	4,161	-5%	1	1	0%	835	4,607	+452%	0	0	—
case-02 Can you give me a bash snippet using cURL to introspect an OAuth access token on Telnyx? I have a token string and want to check its validity and expiration metadata. Return the command formatted with proper authentication headers.	fail→pass	7,513	3,374	-55%	1	1	0%	1,470	4,324	+194%	0	0	—
case-03 Please write a shell script that uses cURL to request OAuth server metadata from Telnyx's discovery endpoint, including status code parsing to handle potential authorization or rate-limiting failures.	fail→pass	16,410	7,301	-56%	1	1	0%	3,296	5,222	+58%	0	0	—
case-04 Write a cURL command to grant authorization for an OAuth consent token 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.example' on Telnyx.	fail→pass	6,106	3,032	-50%	1	1	0%	1,152	4,307	+274%	0	0	—
case-05 Provide a cURL POST call to the Telnyx OAuth token endpoint to request an access token using client credentials.	fail→pass	5,880	3,466	-41%	1	1	0%	1,147	4,330	+278%	0	0	—
case-06 How do I list all existing OAuth clients for my account via Telnyx cURL?	pass→pass	6,737	3,318	-51%	1	1	0%	1,352	4,308	+219%	0	0	—
case-07 Write a cURL call to retrieve details of a specific Telnyx OAuth client with ID '550e8400-e29b-41d4-a716-446655440000'.	pass→pass	3,457	2,022	-42%	1	1	0%	695	4,073	+486%	0	0	—
case-08 Construct a cURL command to update an OAuth client's configuration on Telnyx using client ID '550e8400-e29b-41d4-a716-446655440000'.	fail→pass	5,123	3,197	-38%	1	1	0%	1,032	4,373	+324%	0	0	—
case-10 Write a cURL request to download the JSON Web Key Set from Telnyx for verifying OAuth tokens.	pass→pass	6,963	2,260	-68%	1	1	0%	1,216	4,072	+235%	0	0	—
case-11 Write a cURL GET command to retrieve details for consent token 'token_abc123' on Telnyx.	fail→pass	7,987	2,185	-73%	1	1	0%	1,421	3,998	+181%	0	0	—
case-12 Construct a cURL command for dynamic OAuth client registration (RFC 7591) on Telnyx.	fail→pass	8,630	4,268	-51%	1	1	0%	1,660	4,516	+172%	0	0	—
case-13 Write a cURL command to retrieve all active OAuth grants associated with my Telnyx user.	pass→pass	6,032	3,464	-43%	1	1	0%	1,087	4,335	+299%	0	0	—
case-19 Write a cURL POST request to Telnyx OAuth token endpoint to refresh an expired token using refresh token string 'ref_12345'.	fail→pass	5,149	6,322	+23%	1	1	0%	1,002	4,120	+311%	0	0	—
case-14 Provide a cURL request to revoke an OAuth grant with ID '550e8400-e29b-41d4-a716-446655440000' on Telnyx.	fail→pass	4,325	2,414	-44%	1	1	0%	827	4,169	+404%	0	0	—
case-15 Write a cURL GET snippet to discover Telnyx's OAuth 2.0 protected resource metadata.	fail→pass	5,421	2,026	-63%	1	1	0%	1,035	4,021	+289%	0	0	—
case-16 Write a cURL command to hit the Telnyx OAuth authorization endpoint for requesting 'admin' scope.	fail→pass	6,872	1,474	-79%	1	1	0%	1,182	3,922	+232%	0	0	—
case-17 Give me the cURL command to retrieve details for a specific OAuth grant ID '550e8400-e29b-41d4-a716-446655440000'.	fail→pass	5,159	2,745	-47%	1	1	0%	999	4,255	+326%	0	0	—
case-20 Write a cURL command to search and order an available US toll-free phone number on Telnyx.	pass→pass	8,670	7,468	-14%	1	1	0%	1,782	5,259	+195%	0	0	—
case-21 Write a bash script using openssl and base64 to generate a PKCE code_verifier and code_challenge pair locally on Linux.	pass→pass	11,670	10,925	-6%	1	1	0%	2,285	5,786	+153%	0	0	—
case-22 Provide a cURL command to send an SMS message from '+13125550002' to '+13125550001' with text 'Hello' using Telnyx Messaging API.	pass→pass	3,318	3,402	+3%	1	1	0%	660	4,388	+565%	0	0	—

These cases were also screened by the skill’s intent / safety pass.See the Trust review ↗Reproduce this benchmark in Colab ↗

How this skill was measured

DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 22 cases were attempted. The headline lift of +55 percentage points is the difference between those two pass rates over the 22 comparable cases.

Model measured: gemini-3.6-flash
Graded by: gemini-3.6-flash
Grading method: judged
Verification: verified
Pass rate without the skill: 45.5%
Pass rate with the skill: 100%
Cases attempted: 22
Cases counted toward lift: 22
Cases that regressed: 0
Skill version measured: v1
Run completed: 8/22/2026, 13:59 UTC

Measured example — same prompt, with vs. without the skill · from the benchmark run · case case-02

Prompt

Can you give me a bash snippet using cURL to introspect an OAuth access token on Telnyx? I have a token string and want to check its validity and expiration metadata. Return the command formatted with proper authentication headers.

Without the skill loaded, the model failed this case. With it loaded, the same prompt on the same model passed. This is one improved case from the latest verified run; every case, including any that regressed, is in the table above.

Show both answers

SkillScore blends 4 signals1 of 4 complete

BenchmarkPass rate WITH skill on a verified run100

Live evalNeeds ≥20 evaluated traces in 30 days

AI ratingNeeds ≥10 rated traces

AdoptionNeeds ≥10 serves across ≥2 orgs in 30 days

Efficiency · separate axis (at equal correctness)+0% turns+287% tokens

Shown for transparency; not credited unless a verified run shows no correctness regression.

Backed by 1 of 4 signals — each added signal makes the score more robust.

Verified on gemini-3.6-flash · re-tested 6 days ago

Other measured skills in the registry, with their headline benchmark lift.