1. A method, comprising: receiving, by a first network device in an application programming interface (API) management layer of a service provider network, a token request from an application; generating, in response to the token request, a token that includes a time-stamp and a server identifier, the server identifier indicating a particular proxy server, of a group of proxy servers in the API management layer; receiving, by a second network device in the API management layer, an API call that includes the token; validating, by the second network device, the token; routing, by the second network device, the API call to the particular proxy server indicated by the token in response to successfully validating the token; and providing, to the application, a bypass uniform resource locator (URL), to bypass the API management layer, for one or more types of designated API calls.