These access tokens serve as a way of authenticating requests to the dockerhub-webhook, dockerregistry-webhook and acr-webhook endpoints.

By default, all requests to those endpoints must include a valid token in the path component before /notify. E.g. https://jenkins/dockerhub-webhook/{token}/notify However, it is possible to disable that requirement with the system property:

org.jenkinsci.plugins.registry.notification.webhook.JSONWebHook.DO_NOT_REQUIRE_API_TOKEN=true