Security risk using token in url

Hi

I have created a webservice and I link it via zapier. My concern is the url in the post command sends the token in plain text in the url??

Isn't this a security issue??

Eg the url looks like below