# The access_token query parameter stops working

Calls to query parameter access_token on Blizzard Battle.net API stopped working on September 30, 2024.

On September 30, 2024, the Blizzard Battle.net API stopped accepting the query parameter access_token. Calls that pass OAuth access tokens via the query parameter fail after this date. It is no longer permissible to provide access tokens through the URL query string.

## What to use instead

Send the token in an Authorization: Bearer {token} header instead of using ?access_token=.

- API: Blizzard Battle.net API (*.api.blizzard.com)
- Kind: Behaviour change
- Announced: August 9, 2024
- Takes effect: September 30, 2024
- Calls after that day: fail
- Calls it hits: `query parameter access_token`
- Source: [Announcement](https://us.forums.blizzard.com/en/blizzard/t/upcoming-changes-to-battlenet%E2%80%99s-api-gateway/51561)
- Verified: October 26, 2026, against Blizzard Battle.net API's own pages
- Page: https://www.okapi.bot/providers/blizzard-battle-net-api/breaking-changes/the-access-token-query-parameter-stops-working/

## Blizzard Battle.net API's words

> First, it will no longer be permissible to pass OAuth Access Tokens via the URL query string. Instead, these tokens must be included in the HTTP header of the request

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent