I searched mc-1 and it said not secure
Same goes for the api dashboard
WEB-3064 Test report
WEB-3066 MCAPI project summary uses HTTP instead of HTTPS for project summary