You can deploy a CAXL application on any web server, including Tomcat.
In some cases, you will be required to address the problem of cross-origin resource sharing (CORS). You can do this with a reverse proxy, for example. A reverse proxy tricks the system into thinking all requests are being made from the same origin. For more information on CORS, here's the Wikipedia entry for CORS.
The CAXL on-premise deployment guide describes how CAXL can be deployed to an Apache web server: