You pass api_token in a wrong way. Read the website document to see how do they pass token is the right way to solve your question.
In ordinary situations we will do something like this:
requests.get(HOST, auth=(user,api_token))
But sometime we can pass token into headers straightly:
requests.get(HOST, headers={'Authorization': "Bearer {}".format(api_token)})
requests.get(HOST, headers={'Authorization': api_token})
Read Python requests library how to pass Authorization header with single token to know more about how to pass token straightly.