Amazon Web Services (which is probably the most heavily used API on the Web) use HTTP headers for authentication. But I guess developers typically use software libraries to access AWS rather than making the HTTP calls directly.

//Ed