In your app\http\Middleware\VerifyCsrfToken.php file.

edit $except property with:

protected $except = [
  'yourapi/*' 
];
 Save
This will exclude your api routes from CSRF verification.And keep it up for other things like your frontend.