MediaWiki

Apihelp-edit-param-token

From Gender and Tech Resources

The token should always be sent as the last parameter, or at least after the $1text parameter.