Currently, ListenBrainz only offers a single API token per user. If you want to share your API token with an external application, you currently have to give it your primary API token with full control over your account. If such an application was compromised, you'd have to regenerate it and update every client that currently uses it. Additionally, some applications might only require read access to your stats (and require the login for rate limits or other features), but would currently get access to listen submission and playlist management as well.
For all these reasons, multiple named and scoped API tokens that could be managed in the user settings would be useful to have.