What Axon can — and can't — do

Every integration is read-only. Axon requests the minimum permissions needed and cannot modify, delete, or create anything in your accounts.

Gmail

gmail.readonly

Search, list, and read email messages and metadata from the command line.

Axon never sends, modifies, or deletes emails.

Google Drive

drive.readonly

Search for files, read document content, and export Google Docs, Sheets, and Slides as text.

Axon never creates, modifies, or deletes files.

Google Calendar

calendar.readonly

List and search calendar events to view your schedule and upcoming meetings.

Axon never creates, modifies, or deletes events.

Slack

OAuth user token

Search messages, read channel history, browse threads, and list users in your workspace.

Axon never posts messages, creates channels, or modifies workspace settings.

Notion

internal integration

Search pages, read content, and query databases in your workspace.

Axon never creates, edits, or deletes pages or database entries.

HubSpot

OAuth read-only

View contacts, deals, leads, and tasks in your CRM.

Axon never creates, updates, or deletes CRM records.

GitHub

device flow OAuth

Clone repositories, list branches, view commits, and check status across your repos.

Axon never pushes code, creates PRs, or modifies repository settings.

No server. No middleman.

Axon is a local command-line tool. When you run a command, it calls each service's API directly from your machine. Nothing passes through an Axon server — because there isn't one.

Your machine
Axon CLI runs here
Direct HTTPS
Service APIs
Google, Slack, etc.
No intermediary server — your data never touches a third party

Direct communication

API calls go straight from your device to each service. No proxy, no relay, no man-in-the-middle.

Local token storage

OAuth tokens live on your filesystem at ~/.axon/. Never transmitted anywhere.

Zero data collection

No analytics, no telemetry, no usage tracking, no crash reporting. We don't run servers that receive your data.

Domain whitelisting

Axon includes built-in domain filtering so you control whose content enters your workflow. When enabled, only emails, Drive files, and calendar events from approved domains are shown — everything else is excluded.

Whitelist

Approve trusted domains. Only content from these senders is displayed.

Blacklist

Block unwanted domains. Content from these senders is always excluded.

Cross-integration

Applies to Gmail (by sender), Drive (by owner), and Calendar (by organiser).

Manage domains interactively with axon email domains, through .axon/config.yaml, or from the web UI.

Revoke access any time

You're always in control. Remove Axon's access from each service's settings, or delete the local token files from your machine.

G

Google (Gmail, Drive, Calendar)

Google Account Permissions → find Axon → Remove Access

S

Slack

Workspace settings → Manage apps → remove Axon

H

HubSpot

Settings → Integrations → Connected apps → remove Axon

</>

GitHub

GitHub Applications → revoke Axon's access

You can also delete token files directly from ~/.axon/ to remove all stored credentials from your machine.

Questions?

We're happy to explain anything in more detail.