Every request carries the API token in the token query parameter.

Draft. To write: where tokens are generated in PRIM, what a token can access, rotation and revocation.