The API Token can either be defined in headers like:
Authorization: Bearer TOKEN
Or via arguments:
/api/zone/example.com?api_token=TOKEN