diff --git a/internal/modules/gold/vnappmob_client.go b/internal/modules/gold/vnappmob_client.go
index a0bd58c..7a7c83a 100644
--- a/internal/modules/gold/vnappmob_client.go
+++ b/internal/modules/gold/vnappmob_client.go
@@ -212,7 +212,7 @@ func (c *VNAppMobClient) refreshKeyLocked(ctx context.Context) error {
 		return err
 	}
 
-	req, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint, nil)
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, endpoint, nil)
 	if err != nil {
 		return fmt.Errorf("vnappmob: build refresh request: %w", err)
 	}
diff --git a/internal/modules/gold/vnappmob_client_test.go b/internal/modules/gold/vnappmob_client_test.go
index fc62454..ab67871 100644
--- a/internal/modules/gold/vnappmob_client_test.go
+++ b/internal/modules/gold/vnappmob_client_test.go
@@ -100,8 +100,8 @@ func TestRefreshKey(t *testing.T) {
 	exp := time.Unix(1000, 0).Add(14 * 24 * time.Hour).Unix()
 	var refreshHits int32
 	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		if r.Method != http.MethodPost {
-			t.Errorf("refresh: want POST, got %s", r.Method)
+		if r.Method != http.MethodGet {
+			t.Errorf("refresh: want GET, got %s", r.Method)
 		}
 		if !strings.HasSuffix(r.URL.Path, "/api/request_api_key") {
 			t.Errorf("refresh path: got %s", r.URL.Path)