Locking down query string parameters to an API Key

Hmmmm, not really - tokens grant access and enforce rate limits/quotas, but they do not enforce ‘form’ (yet), do you have a use case you could describe? Might be an interesting new addition?

M.