I need is to create an API token with that can only add a new leads to the CRM. Other permissions such as View/Edit of any data should be denied when using this limited token. The API token would be used to add just a couple of leads each day to the CRM from emails.

From what I can tell this is probably possible, but seems to require creation of a dedicated user, setting the limited permissions for this user, and then an API token from that user. The downside it seems is that this requires the purchase of full cost user just for entry of a couple leads each day.

Is there a better way to accomplish this without the need for a full cost user account?