Use only token & endpoint for service auth