Kürzlich veröffentlicht.

Verify now delivers one-time passcodes over Telegram, alongside email, SMS, and WhatsApp. The channel is available in every country and sits after WhatsApp and SMS but before email, so no verification changes the channel it starts on. Where a recipient has both a phone number and an email address, Telegram is now tried before the email fallback. If you have pinned a channel order for a country, Telegram joins the end of that pin instead, until you save a new order placing it where you want it.

Codes arrive from Telegram's own verified notification account. There is no Bird sender and no sender of your own to configure, which is a property of the Telegram Gateway rather than something still to come. A number is checked for whether it can receive a Telegram message before one is sent, and where it cannot, the verification moves to the next channel without a message going out.

Using it

Nothing is required to turn it on. To reach Telegram earlier for a given country, reorder that country's channels in country configuration, or name the order per request with options.channels on POST /v1/verify/verifications. telegram is a valid channel name everywhere a channel name is accepted.

One thing to check if you call the API directly

A per-country channel order must name every channel available in that country. Telegram has now joined that set, so orders you saved before this release keep working, but re-submitting one is rejected with a 422 until you add telegram to it. Reading the country's current channels and submitting them back is enough. The dashboard handles this for you.

The email Metrics page (Email → Metrics) now splits into an Outbound tab, everything you send, and a new Inbound tab covering what your workspace receives. Inbound shows a Messages received count for the selected range plus a volume-over-time chart, once you've set up a forward address or your own domain for receiving. See email metrics.

Also in this release:

• New guide: SMS character limits lays out GSM-7 versus UCS-2 encoding, which characters (curly quotes, emoji, the euro sign and other extension-table characters) push a message into the pricier alphabet or eat two character slots, and the 12-segment cap on a single send.

Getting a list into Bird no longer needs a developer. Import on the Contacts page now takes a CSV, TSV or Excel file of up to 50,000 contacts, reads the header row to work out which column is the email address and which is the phone number, and shows you the first rows as the contacts they will become before anything is written.

Until now the dashboard took contacts pasted one per line as email, first name, last name, so anything that was not already in that exact shape meant editing a spreadsheet by hand first, and anything with custom fields meant calling the API. Most lists arrive as an export from another tool, with the columns that tool happened to name.

What's new

• The columns are matched for you. "Email Address", "E-Mail", "Correo electrónico" and "email_address" all land on the email field, and a single column holding a whole name is split into a first and a last. Where two columns could fill the same field, the one whose values back up its name wins. Every match is a dropdown you can change.
• You see the contacts, not the file. The preview shows the first ten rows as the contacts they will become, so a name column splitting the wrong way or a date reading as text is something you catch before you commit rather than after.
• Rows that cannot be imported say why, and where. Each one is listed with the line number to open in your own file and what is wrong with it, both on the preview and again when the run finishes. Nothing is skipped silently.
• Custom properties and audiences come along. Any column can map to one of your typed contact properties, and everyone in the file can be added to one or more audiences as part of the same import.
• Re-importing is safe. Each row is matched against the identifiers it carries and updated, so importing a corrected file updates the contacts rather than duplicating them.

Importing and syncing contacts covers the flow. To sync from your own database instead, POST /v1/contacts/batch still upserts up to 1,000 contacts a call and now accepts 30 calls a minute.

Bird SMS used to be outbound only. Now, when someone texts one of your numbers, Bird stores the message beside your sends and pushes it to your endpoint as sms.received, so you can answer a reply without polling for it.

What's new

• The sms.received webhook. Subscribe from the API, the SDKs, bird webhooks create, or the MCP server. The payload carries the body, the segment breakdown, both numbers, and the sending operator where the carrier reports one, so you can act on a reply without a second request.
• Inbound messages in the API and the log. GET /v1/sms/messages?direction=inbound returns what you received, and each message opens in the SMS log with its body and timeline.
• Received-message metrics. The SMS Metrics page shows received volume with its period-over-period change, and a Received messages page breaks it down by number, country and sending operator, so you can see which of your numbers is taking the traffic.

Replies are yours to act on

Bird records a reply and passes it to you; it does not interpret it. A STOP arrives as an ordinary sms.received, and suppressing future sends to that number is your integration's job for now. We will say so clearly here when that changes.

One change to existing webhooks

carrier and mcc_mnc are now omitted from sms.sent, sms.delivered and sms.received payloads when the carrier does not report them, rather than arriving as null. That matches the way the message resource has always reported these fields. If you branch on null for either, check for absence instead. sms.accepted now also carries segments, the count your send is billed on.

Bird has an official PHP SDK. composer require messagebird/sdk gives you a typed client over the same curated surface the Go, TypeScript, and Python SDKs cover, so a PHP service no longer has to hand-roll HTTP calls against the API.

It targets PHP 8.2+ and is synchronous. Requests go through any PSR-18 client you already have, Guzzle or Symfony HttpClient included, discovered automatically. Nothing pins you to a transport, and per-request timeouts stay where you already configure them.

What you get

• The curated surface, method for method with the other SDKs: email (send, batch, get, list, cancel, stats, mailboxes, threads), SMS and its templates, WhatsApp, Verify, contacts, contact properties, audiences, domains, and realtime.
• A one-argument client. Only the API key is required. The region comes from the key's bk_{region}_ prefix, so a bk_eu1_… key routes to EU with no extra configuration.
• Retries and idempotency you don't write. Transient failures retry with jittered backoff and honor Retry-After, and every mutation, DELETE included, carries an idempotency key generated once and reused across attempts. A retry cannot act twice.
• Errors as exceptions. A failed call raises ApiException carrying the HTTP status plus the API's own error type and code, so you branch on a stable value instead of parsing a message.
• Webhook verification. $bird->webhooks->unwrap() checks a Standard Webhooks signature against your signing secret and hands back the verified payload.
• An escape hatch for the long tail. get, post, put, patch, and delete on the client reach any endpoint directly, so a newly shipped API operation never waits on an SDK release.

Not in this release

Framework packages. The quickstart is a plain PHP script, and there is no Laravel or Symfony integration yet. The client itself works inside either framework today; what is missing is the idiomatic wrapper, which is on the roadmap.

To send something, start with the PHP email quickstart. For the client's configuration, retry, and error model, see the PHP SDK reference.