What all type of attacks I can perform when application is passing parameters as token

I am performing security testing on our internal application which is in Angular Js. How ever All parameters are passing as token, How I can manipulate the parameters ? Do we have specific attacks for such request ? Click here to see image