diff --git a/plex-api-spec.yaml b/plex-api-spec.yaml
index 621c2e75..a1420315 100644
--- a/plex-api-spec.yaml
+++ b/plex-api-spec.yaml
@@ -16,7 +16,7 @@ info:
 
     ## Authentication
 
-    - **X-Plex-Token**: Pass via the `X-Plex-Token` header on every request. It may also be passed as a query parameter (`?X-Plex-Token=...`) on all endpoints.
+    - **X-Plex-Token**: Pass via the `X-Plex-Token` header on every request.
     - **X-Plex-Client-Identifier**: Mandatory for OAuth PIN flow (`/pins`) and JWT device registration. Must be a unique, persistent identifier for the client application.
     - **OAuth PIN Flow**: `POST /pins` → user visits `https://plex.tv/link` → `GET /pins/{pinId}` → obtain `authToken`.
 
@@ -16352,7 +16352,7 @@ paths:
               schema:
                 type: string
         '401':
-          description: Unauthorized - Returned if the X-Plex-Token is missing from the header or query.
+          description: Unauthorized - Returned if the X-Plex-Token is missing from the header.
           content:
             application/json:
               schema:
@@ -18954,7 +18954,7 @@ paths:
                     message: X-Plex-Client-Identifier is missing
                     status: 400
         '401':
-          description: Unauthorized - Returned if the X-Plex-Token is missing from the header or query.
+          description: Unauthorized - Returned if the X-Plex-Token is missing from the header.
           content:
             application/json:
               schema:
@@ -19342,7 +19342,7 @@ paths:
                     message: X-Plex-Client-Identifier is missing
                     status: 400
         '401':
-          description: Unauthorized - Returned if the X-Plex-Token is missing from the header or query.
+          description: Unauthorized - Returned if the X-Plex-Token is missing from the header.
           content:
             application/json:
               schema:
@@ -19769,7 +19769,7 @@ paths:
                     message: X-Plex-Client-Identifier is missing
                     status: 400
         '401':
-          description: Unauthorized - Returned if the X-Plex-Token is missing from the header or query.
+          description: Unauthorized - Returned if the X-Plex-Token is missing from the header.
           content:
             application/json:
               schema: