> ## Documentation Index
> Fetch the complete documentation index at: https://docs.serval.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Axonius

> Connect Axonius to Serval to look up devices and users from your correlated asset inventory, browse saved queries, and tag devices through workflows and the Axonius API.

## About Axonius

Axonius is a cybersecurity asset management platform that combines data from your IT and security tools into one inventory of devices, users, and software. Serval connects to your Axonius instance with a service account's API key and secret. Your team can then find the devices a person uses, look up a device by hostname, browse saved queries, and tag devices for follow-up. Workflows can also call the Axonius API directly.

**Authentication:** API key and API secret from an Axonius service account. Serval stores them and adds them to each request on its own servers, so the credentials never reach workflow code.

**Data sync:** On-demand only. Serval doesn't sync or ingest data in the background. It calls your Axonius instance only when a workflow or API action runs.

## What the Axonius integration enables

| Capability | Description |
| - | - |
| Axonius REST API access | A typed API action for asset search and counts (devices, users, and other asset types), field discovery, single-asset lookup, tags, saved queries, and Enforcement Sets. |
| Asset Lookup bundle | An installable bundle containing the four workflows below. |
| Find Axonius Devices for User | Finds the devices a user has recently logged into, matching on the username part of their email. No approval required by default. |
| Get Axonius Device by Hostname | Returns a device's OS, serial number, model, network addresses, last-seen time, recent users, data sources, and tags. No approval required by default. |
| List Axonius Saved Queries | Lists your saved queries, optionally filtered by name, with their asset type and AQL filter. No approval required by default. |
| Tag Axonius Device | Adds a tag to one device found by hostname. If no device or more than one device matches, nothing changes. Requires installer approval by default. |

## Get your credentials

The Axonius REST API only accepts service accounts. Create a dedicated one for Serval.

**1. Create a role for Serval**

In Axonius, open **System Settings > User and Role Management > Roles**. Create a role that has API access and can view devices, users, and queries. To use **Tag Axonius Device**, the role also needs permission to edit tags.

**2. Create a service account**

Open **System Settings > User and Role Management > Service Accounts** and create a service account with that role.

**3. Copy the API key and secret**

When you save the service account, Axonius displays its API key and API secret. Copy the secret right away: Axonius shows it only once. If you lose it, reset the service account's API key to get a new secret.

**4. Note your instance domain**

This is the address you use to reach Axonius, without `https://` (for example, `yourcompany.on.axonius.com`).

## Connect in Serval

**1. Open the Axonius integration**

In Serval, find **Axonius** in the integrations list and choose to connect
it.

**2. Enter your Instance Domain**

Enter your domain ending in `axonius.com`, for example
`yourcompany.on.axonius.com`. If you paste a full URL, Serval removes the
`https://` prefix and any trailing slash.

**3. Enter the API Key and API Secret**

Paste the service account's API key and API secret.

**4. Save the connection**

Serval checks the connection by reading your instance's version information.

> [!TIP]
>
> When you edit a connection, the API Key and API Secret appear masked except
> for their last 4 characters. Leave a masked or blank field unchanged to keep
> its saved value, and enter a new value only for what you want to change.
> The instance domain can't be changed. To move to a different instance, remove
> the connection and connect again.

## Verifying the connection

The Axonius connection runs four health checks:

* **Validate Axonius API Connection**: confirms the domain, API key, and secret work, and reports the Axonius version.
* **Check Axonius Device Access**: confirms the service account can count devices.
* **Check Axonius User Access**: confirms the service account can count users.
* **Check Axonius Saved Query Access**: confirms the service account can list saved queries.

> [!TIP]
>
> If the first check passes but a later one fails, your credentials are valid
> but the service account's role is missing a permission. Add the permission to
> the role in Axonius.

## Gotchas and troubleshooting

> **Domain is rejected when connecting**
>
> Serval currently connects only to Axonius-hosted instances whose domain ends
> in `axonius.com`. Self-hosted instances on other domains aren't supported
> yet. Contact [support@serval.com](mailto:support@serval.com) if you need one.

> **Requests fail with 401 or 403**
>
> The API rejects regular user accounts, so check that the key and secret
> belong to a service account. Also check that its role has API access and
> permission to view the asset type you are querying.

> **Find Axonius Devices for User returns nothing**
>
> This workflow matches the part of the user's email before the @ against each
> device's recent users. If your devices record logins under a different
> username format, use Get Axonius Device by Hostname or an AQL search
> instead.

***

Need help? Contact **[support@serval.com](mailto:support@serval.com)** for assistance with your Axonius integration.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.