Errors

api_key_in_query_string

Keys are not accepted in the query string

The key was sent as a URL parameter. Njiwa refuses this because URLs end up in server logs, browser history and referrer headers.

What to do

Send it as a header instead: Authorization: Bearer sk_live_.... The one exception is the waclient compatibility endpoints, which accept the old form on purpose.

The shape

{
  "error": {
    "type": "...",
    "code": "api_key_in_query_string",
    "message": "...",
    "docs": "https://docs.njiwa.upeo.ai/errors/api_key_in_query_string"
  }
}