If ID is incremental, unique and not secret, you can use ID as a token. The parameters and conditions for tokens relies on usecase.