Skip to main content

Overview

Connect Axiom to Leme with an Axiom API token. Once connected, Leme can help your team inspect observability data from supported agents and workflows. Current agent support for Axiom is read-focused: Leme can list datasets, read dataset fields, and run APL queries.
Use Axiom API tokens, not Personal Access Tokens. API tokens support least privilege; PATs grant broad account control.

Prerequisites

  • An active Leme workspace.
  • Permission to connect shared integrations in the workspace.
  • An Axiom API token in the xaat-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx format.
The token must be allowed to list datasets, because Leme checks dataset access before finishing setup.

Create the token in Axiom

  1. Open the Axiom workspace.
  2. Open the token settings.
  3. Create an advanced API token.
  4. Grant only the permissions required for the expected use case.
  5. Copy the generated token. It must start with xaat-.
For current Axiom support in Leme, the token must allow:
  • listing datasets;
  • reading dataset fields;
  • running APL queries.

Connect in Leme

  1. In the Leme dashboard, open Connections.
  2. Select Axiom.
  3. Keep the default edge unless your Axiom administrator gave you a regional edge.
  4. Paste the API token.
  5. Click Connect Axiom.
Leme validates the token before saving the connection. If the token is invalid or does not have enough permissions, the setup will show an error. After setup succeeds, attach the Axiom connection to the agents that should use it and confirm the relevant usage policies are enabled.

Edge setting

Most teams can keep the default api value. Change it only when your Axiom administrator tells you that queries should use a regional edge.
EdgeUse when
apiYou are not sure which edge to use, or your workspace uses the default edge.
us-east-1.aws.edgeYour Axiom administrator gave you the US East 1 edge.
eu-central-1.aws.edgeYour Axiom administrator gave you the EU Central 1 edge.
If queries fail after setup, confirm the edge with your Axiom administrator and reconnect with the correct value. For current Axiom support in Leme, create an API token that can:
  • list datasets;
  • read dataset fields;
  • run APL queries.
Limit the token to the datasets Leme should be allowed to query.

Security notes

The API token is stored securely by Leme and is never shown again after setup. Rotate the token in Axiom if the token is exposed, if the owner leaves your company, or if your permission model changes.

Troubleshooting

Token rejected before calling Axiom

Confirm that the token starts with xaat- and follows the Axiom API token format.

Setup fails during validation

The token probably does not have permission to list datasets. Create an API token with dataset read permission or use another token with sufficient scope.

Query fails after connection

Check that the selected edge matches the dataset environment and that the token has permission for the requested action.

The connection does not appear for an agent

Confirm that the Axiom connection is attached to the agent and that usage policies allow the intended action.