What token use for client side requests to strapi endpoints?

thanks @DMehaffy for your response, but are these API tokens secure for client side (react/nextjs app)?

and this API token is any string or a JWT or something else?

thanks!!