Managing Advanced API Settings

The Axonius REST API is available for regular user accounts for Axonius v6.1.73 and earlier. For Axonius v6.1.74 and later, the REST API is accessible only using service accounts.

To enable advanced API settings:

1. From the top right corner of any page, click . The System Settings page opens.
2. In the Categories/Subcategories pane of the System Settings page, select API.
3. Toggle on Enable advanced API settings and select the options you want:

• Enable API destroy endpoints - Select this checkbox to gain access to the /users/destroy and /devices/destroy endpoints, enabling you to delete all assets.

• Allow cross-domain requests from developer.axonius.com - When enabled, you can connect to your Axonius instance from the Readme API reference documentation. Once enabled, it may take a few minutes to take effect.

API Rate Limit

Limit the number of API requests of each API key - Enables or disables API rate limiting per API key. When turned on, Axonius tracks and enforces a request limit for each API key (and its associated OAuth2/MCP bearer tokens) within a rolling one-minute window. When turned off (the default), no per-key limit is applied.

Maximum API requests per minute for each API key - Sets the maximum number of API requests allowed per API key per minute. The default value is 600 requests per minute, and the accepted range is 1 to 100,000. This setting only takes effect when Limit the number of API requests of each API key is enabled. When a key exceeds the limit, the API returns an HTTP 429 (Too Many Requests) response with a Retry-After header and details on when the key can make requests again.

Rate limiting applies to requests made with an API key and secret or with an OAuth2/MCP bearer token; browser sessions are not counted. The setting is off by default.