Gateways
For: Platform operators managing a fleet of self-hosted Axemere gateways.
Gateways | Export Destinations | Gateway Keys | Automation Keys
The Gateways page is the control plane view for your self-hosted gateway fleet: enroll new gateways, monitor fleet health, and track request volume and policy enforcement across all gateways.
Navigation: console.axemere.ai/gateways
Table of Contents
Fleet Stats
Four summary cards at the top of the page show the current health of your gateway fleet:
| Card | Description |
|---|---|
| Total Gateways | All self-hosted gateways registered to your organization |
| Active Gateways | Gateways with a heartbeat in the last 24 hours, indicating the gateway is online and processing traffic |
| Requests | Total API requests routed across all gateways in the selected time window (1h / 6h / 24h) |
| Blocked | Requests rejected by policy (rate limits, content filters, access controls) in the selected window |
A gateway with no heartbeat in 24 hours is considered inactive. If Active Gateways drops below Total Gateways, check individual gateways for connectivity issues.
Fleet Traffic Chart
The Fleet Traffic chart plots requests and blocked requests across all gateways over the selected time window. Use the window selector (1h / 6h / 24h) in the top-right of the chart to adjust the range.
- Requests (blue area): total requests routed through the fleet
- Blocked (red line): requests denied by policy
A spike in Blocked without a corresponding spike in Requests typically indicates a policy rule triggered by a specific workload or content pattern rather than a traffic surge.
Self-Hosted Gateways Table
The Self-Hosted Gateways table lists every enrolled gateway. Each row shows:
| Column | Description |
|---|---|
| Gateway ID | The MVGC_NODE_ID value set when the gateway was started |
| Status | active or revoked |
| Last Seen | Time of the most recent heartbeat from the gateway |
| Enrolled | Date the gateway completed enrollment |
| Credentials | Credential scope applied to the gateway (e.g. org-wide) |
| Export | Export destination configured for the gateway, or none |
| Policy | Policy bundle applied to the gateway (e.g. org default) |
Switch between List and Map view above the table using the toggle in the top-right.
Below the gateway table, a separate Enrollment Tokens panel tracks bootstrap tokens: the credentials used to enroll a gateway, not the gateways themselves. It has its own Label / Status / Gateway / Used At / Created / Expires / Actions columns, and status tabs (Active / Enrolled / Expired / Revoked / All) to filter by token state. Use it to audit outstanding tokens that haven't been used yet, or to revoke a token before it's redeemed.
Enrolling a Gateway
Click + Enroll Gateway (Admin or Owner role required) to open the enrollment flow, which has two steps:
- Enroll a Gateway: enter a label for the gateway and click Generate Token to create a bootstrap token.
- Deploy Your Gateway: the dialog shows a platform-specific install command with the bootstrap token embedded, across six tabs:
| Platform | Method |
|---|---|
| Docker | docker run with environment variables |
| macOS | Homebrew tap + binary |
| Linux | Direct binary download |
| Windows | Direct binary download |
| Kubernetes | Helm chart |
| .env file | Environment file for custom deployment tooling |
The bootstrap token is shown once, embedded in the install command. Once the gateway connects and enrolls, it stores its configuration locally and no longer needs the token. If a gateway is reset or re-imaged, generate a new bootstrap token.
See the install quickstart guides for platform-specific step-by-step instructions.
Related: Export Destinations | Gateway Keys | Automation Keys | Control Plane Connectivity