What kind of endpoint security do you use?

We are using API key authentication. After sign in you will receive token that you will send as query parameter named token in all oncoming requests.