I found the mmio access api in arm-tf/include/lib/mmio.h, it access the addr to perform I/O operations like many other privileged softwares (linux, optee-os, etc.):