API Edit Record with EOTI

Hello,

I am using EOTI role to allow clients to submit an approval (accept or reject). In an email notification I embed a rich text field with an edit record API. Is it possible to use the edit record API using a user token instead of the app token (so we do not expose our app token outside the organization)? So far I've only seen API Edit Record formulas using the app token and when I switch it out for the user token I get an error.

My formula:
URLRoot() & "db/" & [_DBID_OWNER_APPROVAL] & "?a=API_EditRecord" &
"&_fid_12=" & [Record ID#] &
"&usertoken=XXXX" &
"&_fid_7=Approved" & "&rdr="&URLEncode("customthankyoucodepage");

------------------------------
Mackenzie Phillips
------------------------------