diff --git a/Piwigo-Web-API.md b/Piwigo-Web-API.md
index b180143..549c646 100644
--- a/Piwigo-Web-API.md
+++ b/Piwigo-Web-API.md
@@ -49,7 +49,7 @@ curl -H "Authorization: pkid-20250609-abcdef1234567890:0123456789abcdef012345678
 
 ### Restrictions and security
 
-* Some sensitive methods are explicitly blocked for API key usage ([see the prohibited methods by default](https://github.com/Piwigo/Piwigo/tree/master), you can also add or remove methods in `$conf['api_key_forbidden_methods']`).
+* Some sensitive methods are explicitly blocked for API key usage ([see the prohibited methods by default](https://github.com/Piwigo/Piwigo/blob/ae740ba3afedf2f1b99d34247c5a1cc3cc6d3f4e/include/config_default.inc.php#L476), you can also add or remove methods in `$conf['api_key_forbidden_methods']`).
 * A key can be revoked or renamed at any time from the profile.
 * An expired or revoked key can no longer be used to access the API.
 * Access is tracked (date last used).