A dash between words is fine if it makes the URL more readable. However, a REST API URL should never contain a space. Never use snake_case in a RESTful API, as the underscore can easily be misread as ...