Axiom access is available on Trial and Team plans. A team owner or admin connects one Axiom deployment through Nango. Felan validates the connection before making it available to a new agent session.
Connect
Create a least-privilege Axiom API token
In Axiom, create an Advanced API token with only the dataset-query and resource-read capabilities needed by Felan. Use an API token rather than a personal access token or a basic ingest-only token.
Open Integrations
Select the team, open Integrations, find Axiom, and select Connect.
Enter the Axiom connection values
Enter the API token and the edge subdomain for the deployment that stores the data. Supported subdomains are us-east-1.aws.edge and eu-central-1.aws.edge.
Complete validation
Felan lists the authorized datasets and read-only observability resources, then runs a bounded query against the selected edge. The connection becomes active only when these checks succeed.
Only one Axiom connection is supported per Felan team. The connected edge is shown in the integration details panel.
Supported reads
The Axiom skill can:
- List authorized datasets.
- Run bounded APL queries over explicit time ranges.
- List and inspect dashboards, monitors, saved queries, views, and notifiers.
Queries default to a 15-minute window, allow a maximum seven-day window, limit APL input to 16 KiB, and return at most 1,000 results. List operations return at most 100 items. Provider requests have an eight-second deadline and response/output size limits.
The skill has no ingest, token-management, create, update, copy, enable, disable, delete, or generic authenticated-request operation.
Reconnect and disconnect
Removing Axiom from Integrations deletes the Nango connection and disables the team credentials. New sessions then receive neither Axiom credentials nor usable Axiom access. If Nango no longer returns the connection, Felan omits the stored token from new sessions. If Axiom rejects a revoked or expired token, the CLI returns a sanitized authorization error. Disconnect and reconnect with a valid least-privilege API token.
Customer Axiom credentials are separate from Felan’s platform log-ingestion credentials. Felan does not send its platform logs to the connected customer Axiom account.