# access_token on /api/1/* is deprecated

Rollbar API deprecated /api/1/*, query parameter access_token without giving a shutdown date yet.

Rollbar has deprecated parameter-based authentication without providing a shutdown date. This deprecation affects calls to /api/1/* endpoints that pass the query parameter access_token. Once removed, these requests will fail instead of succeeding.

## What to use instead

Send the access token in the X-Rollbar-Access-Token header instead of the access_token query parameter.

- API: Rollbar API (api.rollbar.com)
- Kind: Endpoint removal
- Takes effect: no date given yet
- Calls after that day: fail
- Calls it hits: `/api/1/*`, `query parameter access_token`
- Source: [Announcement](https://docs.rollbar.com/reference/getting-started-1)
- Verified: October 26, 2026, against Rollbar API's own pages
- Page: https://www.okapi.bot/providers/rollbar-api/breaking-changes/access-token-on-api-1-is-deprecated/

## Rollbar API's words

> Note: Parameter-based authentication (query string or form data) is supported by some API endpoints, but is deprecated.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent