Axiom tokens

• Provider documentation axiomhq/axiom-go internal/config/token.go (ae983c9, 2023-09-19): IsAPIToken is strings.HasPrefix(token, "xaat-"); the Axiom docs response example has a lowercase-hex UUID body and the SDK fixtures use the UUID layout; re-checked 2026-09-29 · observed 2026-09-29 · xaat- + a lowercase-hex UUID (8-4-4-4-12), 41 in all
• Reference 1
• Reference 2
• Reference 3
• Reference 4
• Reference 5
• Reference 6
• Reference 7
• Reference 8
• Reference 9
• Reference 10

Arrival evidence (#528, product redact-secret#1035; #1014 handoff axiom.md, READY by R5). An API token is ingest-only or carries query and dataset-management rights; it is also the service-account password for Postgres-wire and Grafana access. T1: the prefix is the SDK runtime check (R6), the layout and lowercase hex a docs response example plus the SDK fixtures (R5). A bare UUID stays unclaimed; the prefix is load-bearing. Excluded: uppercase-hex bodies (not observed; accepted false negative), placeholders such as xaat-your-api-token, org ids and dataset names. Neither pinned peer has an Axiom rule. Graduated to a registry detector at the 4fb7882 re-pin (redact-secret PR #1039).