Sent Analytics Use , , , and for analytics and paid external number lookup. is state-changing and non-idempotent, even though it does not send a message. Establish context Use client-managed OAuth 2.1/PKCE. Never request or expose a token, API key, authorization header, client ID, or secret. Identify the active organization and Sender Profile when the client exposes them. Minimize sensitive output: mask phone numbers, aggregate where possible, and omit contact, KYC, account, and message-body data that is not needed to answer the question. An organization grant may select an owned Sender Profi…