How to generate API Token for only for activity log

Hi All,
We like to get the data from the activity log using the api key for alerts on the system.
Our problem is that we don’t want to create a superuser token just for that because it’s also not secured.

How can we use the API for getting all activities without giving a superuser to application user?
Please advise,

Best Regards,
Yaniv