# api_key_in_query

API keys must be sent in the Authorization header, never in the URL. Returned with HTTP 401; retrying will not help.

| Property | Value |
| --- | --- |
| HTTP status | `401` |
| Retryable | No |
| `type` | `https://fylane.dev/errors/api-key-in-query` |

Retrying an identical request will fail identically. Change something first — the `details` object names what.

Example response

```json
{
  "type": "https://fylane.dev/errors/api-key-in-query",
  "code": "api_key_in_query",
  "message": "API keys must be sent in the Authorization header, never in the URL.",
  "retryable": false,
  "request_id": "req_01JBQ8Z5T7WXK9MNP2RSTVA3C4",
  "docs_url": "https://fylane.dev/docs/errors/api-key-in-query"
}
```

Quote the `request_id` if you contact support. It is the same value returned in the `X-Request-Id` header and it identifies this exact request in our logs.