It seems like you are using a admin API token.
Since the token can be retrieven from the browser or mobile apps by end user this can lead to your application being compromised, unless you understand what are you doing.
Please use Token Management API in your backend application to produce secure tokens which you can then use in web UI or mobile apps.