For Bitbucket you do need an access token. I recommend that you create a bot user and generate an access token for it using one of the following formats:
Tarball URL will be https://<botusername>:<access_token>@bitbucket.org/<myorg>/<myproject>/get/<ref>.zip
VCS Tarball will be git+https://<botusername>:<access_token>@bitbucket.org/<myorg>/<myproject>.git@<ref>
For Bitbucket you do need an access token. I recommend that you create a bot user and generate an access token for it using one of the following formats:
https://<botusername>:<access_token>@bitbucket.org/<myorg>/<myproject>/get/<ref>.zip
git+https://<botusername>:<access_token>@bitbucket.org/<myorg>/<myproject>.git@<ref>
One of my colleagues wrote a pretty thorough article about various options: revsys.com/tidbits/using-private-p...