Yes you need to use https. Some apis require it, others will take either depending on the receiving application.