diff --git a/api/_debug/pprof.go b/api/_debug/pprof.go
index 09eb5cfcc22405221f7bc86dccabc8f94611b3e3..bec689fbdfbb804bfb518818b2d788590938a57c 100644
--- a/api/_debug/pprof.go
+++ b/api/_debug/pprof.go
@@ -37,6 +37,9 @@ func pprofServe(fn generatorFn, secret string) http.Handler {
 
 func (c *requestContainer) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	auth := r.Header.Get("Authorization")
+	if auth == "" {
+		auth = r.URL.Query().Get("access_token")
+	}
 	if auth != ("Bearer " + c.secret) {
 		// Order is important: Set headers before sending responses
 		w.Header().Set("Content-Type", "application/json; charset=UTF-8")