To enhance security, the Looker language SDKs and the Looker API /login endpoint are being modified.

To enhance security, the Looker language SDKs and the Looker API /login endpoint are being modified. They will exclusively accept passing credentials in the HTTP request body and will no longer support using URL query parameters.

Release date: This update is expected to take effect with the Looker 26.18 release in October 2026.

Potential impact: Any scripts or applications currently passing credentials in the URL query parameters in the Looker SDK libraries, or directly calling the /login API endpoint, will fail after this update.

Who is affected: All customers using Looker SDKs, custom scripts, or applications that call the /login API endpoint directly.

Action required:

We have sent a message to your affected customers. However, to help avoid service disruptions, please recommend that they evaluate their environment and take the following actions before October 2026:

• Upgrade SDKs: Upgrade the Looker SDKs to version 26.4 or later as soon as possible. • Update custom scripts: Modify any scripts or applications that rely on passing Looker API credentials in URL query parameters so that they will pass credentials in the HTTP request body. • Test the environment: Validate these changes in an environment that can identify these potential misconfigurations.