I started working on a new endpoint that will allow to create new access tokens. This requires a database migration. I added can_generate_access_tokens permissions to admin user. Now all I need to do is finish the endpoint handler. It will ensure the caller has appropriate permissions and valid token, then it will create new token and return in in the reponse.