Abstract: Technologies are provided for preventing unauthorized requests using request identifiers associated with security tokens. A request can be received by a computing device that contains a request identifier and one or more security tokens. The computing device can determine whether the request identifier contained in the request is associated with all of the one or more security tokens contained in the request. If the request identifier is not associated with one or more of the security tokens, then the computing device can reject the request. If the request identifier is associated with the one or more security tokens, then the computing device can generate another request that includes one or more protected data items that are associated with the one or more security tokens. The computing device can then transmit the another request containing the one or more protected data items to another computing device for processing.