First off, drupal_get_token() is used to generate a value that protects against cross-site request forgeries. It is normally used when creating a link, which is what overlay_disable_message() does, for example.
'query' => drupal_get_destination() + array(
// Add a token to protect against cross-site request forgeries.
'token' => drupal_get_token('overlay'),
),
To alter a token like [submission:values:total_points], a module needs to implement hook_tokens_alter(). The code used by webform_tokens() can guide you on the code you should write.
function mymodule_tokens_alter(array &$replacements, array $context) {
if ($context['type'] == 'submission' && !empty($context['data']['webform-submission'])) {
// $submission = $context['data']['webform-submission'];
// $node = $context['data']['node'] ? $context['data']['node'] : node_load($submission->nid);
// Find any token starting with submission:values.
if ($value_tokens = token_find_with_prefix($context['tokens'], 'values')) {
if (!empty($value_tokens['total_points'])) {
$replacements[$value_tokens['total_points']] = 100;
}
}
}
}