# key_in_url

API key revoked. HTTP 400.

## What it means

The API key was sent in the URL, so Kapi revoked it.

## What to do

A URL can be stored in logs and browser history. Ask the company administrator for a new key, and send it only in the Authorization header.

## Example response

```json
{
  "type": "https://docs.kapiworks.com/errors/key_in_url",
  "title": "API key revoked",
  "status": 400,
  "detail": "The API key was sent in the URL, so Kapi revoked it.",
  "code": "key_in_url"
}
```

Errors use `application/problem+json` (RFC 9457). Act on `code` or `type`; `detail` is for people and can change.