is it ok send to API key in the post request using PHP and Ajax

Question

Hi I am developing a simple CMS. To Create, Update, Delete a post I am using ajax.

This is how user add a post to blog

1. user email and pa