# API: Can I authenticate without putting the key in the URL?

**URL:** <https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425>\
**Category:** Development\
**Tags:** rest-api\
**Created:** [29 Mayo, 2015 18:17 UTC](https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425 "2015-05-29T18:17:35Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [18 Febrero, 2019 03:07 UTC](https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425/12 "2019-02-18T03:07:51Z")

</div>

User API allows this but server API does not quite yet. I would like to add support for it cause often it is cleaner to pass this info in headers, less risk of bad caching.

---

_[View the full topic](https://meta.discourse.org/t/api-can-i-authenticate-without-putting-the-key-in-the-url/29425)._