The suggestion is for Bitbucket API to have endpoints to list, create, and revoke Workspace, repository, and project access tokens.

Similar to the endpoints available for deploy keys: https://developer.atlassian.com/cloud/bitbucket/rest/api-group-deployments/#api-group-deployments