Skip to main content

​
About Axonius

Axonius is a cybersecurity asset management platform that combines data from your IT and security tools into one inventory of devices, users, and software. Serval connects to your Axonius instance with a service account’s API key and secret. Your team can then find the devices a person uses, look up a device by hostname, browse saved queries, and tag devices for follow-up. Workflows can also call the Axonius API directly. Authentication: API key and API secret from an Axonius service account. Serval stores them and adds them to each request on its own servers, so the credentials never reach workflow code. Data sync: On-demand only. Serval doesn’t sync or ingest data in the background. It calls your Axonius instance only when a workflow or API action runs.

​
What the Axonius integration enables

​
Get your credentials

The Axonius REST API only accepts service accounts. Create a dedicated one for Serval.
1

Create a role for Serval

In Axonius, open System Settings > User and Role Management > Roles. Create a role that has API access and can view devices, users, and queries. To use Tag Axonius Device, the role also needs permission to edit tags.
2

Create a service account

Open System Settings > User and Role Management > Service Accounts and create a service account with that role.
3

Copy the API key and secret

When you save the service account, Axonius displays its API key and API secret. Copy the secret right away: Axonius shows it only once. If you lose it, reset the service account’s API key to get a new secret.
4

Note your instance domain

This is the address you use to reach Axonius, without https:// (for example, yourcompany.on.axonius.com).

​
Connect in Serval

1

Open the Axonius integration

In Serval, find Axonius in the integrations list and choose to connect it.
2

Enter your Instance Domain

Enter your domain ending in axonius.com, for example yourcompany.on.axonius.com. If you paste a full URL, Serval removes the https:// prefix and any trailing slash.
3

Enter the API Key and API Secret

Paste the service account’s API key and API secret.
4

Save the connection

Serval checks the connection by reading your instance’s version information.
When you edit a connection, the API Key and API Secret appear masked except for their last 4 characters. Leave a masked or blank field unchanged to keep its saved value, and enter a new value only for what you want to change. The instance domain can’t be changed. To move to a different instance, remove the connection and connect again.

​
Verifying the connection

The Axonius connection runs four health checks:
  • Validate Axonius API Connection: confirms the domain, API key, and secret work, and reports the Axonius version.
  • Check Axonius Device Access: confirms the service account can count devices.
  • Check Axonius User Access: confirms the service account can count users.
  • Check Axonius Saved Query Access: confirms the service account can list saved queries.
If the first check passes but a later one fails, your credentials are valid but the service account’s role is missing a permission. Add the permission to the role in Axonius.

​
Gotchas and troubleshooting

Serval currently connects only to Axonius-hosted instances whose domain ends in axonius.com. Self-hosted instances on other domains aren’t supported yet. Contact support@serval.com if you need one.
The API rejects regular user accounts, so check that the key and secret belong to a service account. Also check that its role has API access and permission to view the asset type you are querying.
This workflow matches the part of the user’s email before the @ against each device’s recent users. If your devices record logins under a different username format, use Get Axonius Device by Hostname or an AQL search instead.
Need help? Contact support@serval.com for assistance with your Axonius integration.