 <p>It might be possible to generate a token, and include it with the program. However, no matter what, you are facing two serious problems: </p> <p>1) Anyone with access to your software can reverse engineer it, and build fake software to follow whatever clientside security you have.</p> <p>2) All data is transmitted through plaintext. So, anyone who is able to read network traffic between your client and server can see the full transmission.</p> <p>So, my suggestion would be to write server software that heavily restricts what queries are allowed, and only permit those queries that your client needs to be sent.</p>