Auth token would be sent along with every request sent from CAMS or from your server. All your request will be honored only if auth token mathces.
All data communicated between CAMS and your server will be encrypted by this key. If you need plain data to be transferd, keep it empty. The encryption algorithm is AES ECB 256.