You can’t include the API key in the url (it exposes your key you anyone who can see your web traffic). They key must be passed in the headers.
See Grant a custom badge through the API for an example.
2 Likes