You can set header values to RestClient.get
by 2nd argument.
RestClient.get "/url?params1=<val1>¶m2=<val2>..", {x_your_api_token: "YOUR_API_TOKEN"}
And in ActionController, you can get it by request.headers["X-Your-API-Token"]
def validate_access
api_token = request.headers["X-Your-API-Token"] # header name is case insentsitive
...
end
See: