# Private Message Send API

**URL:** <https://meta.discourse.org/t/private-message-send-api/27593>\
**Category:** Support\
**Created:** [April 15, 2015, 12:44pm UTC](https://meta.discourse.org/t/private-message-send-api/27593 "2015-04-15T12:44:59Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)\
**Post date:** [April 16, 2015, 5:19am UTC](https://meta.discourse.org/t/private-message-send-api/27593/8 "2015-04-16T05:19:00Z")

</div>

> [@purldator](#):
>
> A URL would expose the API key, correct?

Only if it’s transported over unsecured HTTP, in which case an intercepting observer could have grabbed the form data anyways.

---

_[View the full topic](https://meta.discourse.org/t/private-message-send-api/27593)._