# credential_in_url

Credential in URL: HTTP 400.

HTTP 400 · Credential in URL

## Meaning
A key or token appeared in the URL's query string, where server logs, proxies and browser history keep it.

## Fix
Send the key in the Authorization header as `Bearer <key>`, and rotate the key you sent: treat it as exposed.

## Retry
The same call fails again until something changes.

## Returned by
- [`GET /v1/status`](/reference/status#get-status)
- [`GET /v1/reference`](/reference/reference#list-reference)
- [`GET /v1/reference/{topic_id}`](/reference/reference#get-reference)
- [`POST /v1/wire/tickets`](/reference/wire#get-wire-ticket)
- [`GET /v1/stream/{topic}`](/reference/wire#stream-topic)
- [`POST /v1/answers`](/reference/answers#create-answer)

---

Generated from registry/generated/problems.json

Support: support@askkelly.ai · Security and disclosure: https://docs.askkelly.ai/security

Information is the edge. Odds are information, not advice · 21+ · Get help