Bitbucket | Entitle

Create an app token

  1. Go to the Atlassian API Tokens page and click Create API token with scopes.

  2. Set your preferred name and expiration for the token, then click Next.

    Name and expiration for API token
  3. Choose Bitbucket as the API token app, then click Next.

  4. Provide the token with these scopes, then click Next:

    admin:workspace:bitbucket
    admin:repository:bitbucket
    read:workspace:bitbucket
    read:repository:bitbucket
    read:permission:bitbucket
    write:permission:bitbucket
    delete:permission:bitbucket
  5. Review your API token details. Once you have verified that everything is correct, click Create token.

  6. Copy the token so you can provide it to the Entitle software when creating the integration.

  7. Copy your email from the Atlassian Email page.

Jira credentials for email matching (optional)

Bitbucket does not provide user email addresses through its API. As a result, Entitle cannot automatically match Bitbucket users to identities based on email.

To enable email-based matching, configure Jira credentials. Entitle uses the Jira API to retrieve user email addresses for this purpose.

ℹ️

To create the API token for the key field, go to the Atlassian API Tokens page and click Create API token (not Create API token with scopes).

Example JSON

{
  "email": "<EMAIL>",
  "app_token": "<APP_TOKEN>",
  "jira_credentials": {
    "url": "https://<YOUR_SUBDOMAIN>.atlassian.net",
    "key": "<API_TOKEN>",
    "user": "[email protected]"
}
ℹ️

Should you need to allowlist this integration, these are the IP addresses from which Entitle's service reaches the integration:

  • Entitle EU (Cloud deployment)
    • 34.243.199.171
    • 54.216.133.226
  • Entitle US (Pathfinder deployment)
    • 52.45.229.219
    • 54.88.235.213
    • 3.224.15.134
  • Entitle CA (Pathfinder deployment)
    • 35.182.218.208
    • 15.156.179.153

What's next?

Make sure your setup is complete by testing your integration.


©2003-2026 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.