JWT token + Policy

@Marcos-Oleiro when you create a key you can choose to create it by applying a policy to it or by choosing a specific list of APIs for it, the choice is yours, but you do have to choose one of those options.

Here is a screen shot of the settings on Tyk Pro