Sectigo AxiomLet customer agents make consequential writes, safely

Narrow delegated authority, human approval in the customer's own workflow, exactly-once execution and receipts both parties can verify.

First ten minutes

What is Axiom

API reference

Axiom Gateway

For developers. Protect an API route or MCP tool through the hosted proxy, a customer-hosted gateway or the embedded SDK. See decisions, run approvals and export signed receipts.

Developer guide

Axiom Control

For enterprises. Adopt existing projects, apply enterprise policy, route approvals to your own systems, contain incidents and deliver evidence to your SIEM.

Admin guide

Agent skill

A versioned skill and machine-readable contract that teach an agent to wait, resume as itself and never execute twice.

Read the skill

Free tools

Agent identity check, MCP tool and skill change monitor, and an offline receipt verifier. No account needed.

Try the tools

Runbooks

Disabled agents, lost keys, unreachable gateways, missing receipts, safe release after containment and SIEM recovery.

Open the runbooks

Concepts

Agents and credentials, grants, delegation, policy layers, approvals, the action state machine, delivery guarantees and receipts.

Learn the model

Developer preview

Axiom is in developer preview (contract version 2026-11-14). Some parts run in mock or simulated mode: the Sectigo Certificate Manager adapter (backed by a local development CA until SCM credentials are configured), the approval connectors (simulated mode; only ServiceNow implements request and readback), and card checkout (plan limits and spend controls are real, the payment provider is not connected). Each page says where this applies.