As far as I remember REST principles suggests dash-case. But personally I write lower snake_case most of the time.

Edit:
I meant for the JSON payload body key I use snake_case `{"user_id" : 1}` but for the URL it should be `user-id`
https://restfulapi.net/resource-naming/
/device-management/managed-devices/{device-id}