The API key is appended as a plain query parameter to the WebSocket URL. Query parameters appear in server access logs (standard HTTP request-line logging), reverse-proxy/CDN access logs, and network ...