Configuration

All configuration lives in sundew.yaml at the project root.

Full reference

sundew.yaml

traps:
  mcp_server: true        # Enable MCP server trap
  rest_api: true           # Enable REST API trap
  ai_discovery: true       # Enable AI discovery endpoints

persona: auto              # "auto" for random, or path to persona.yaml

llm:
  provider: ollama         # ollama | anthropic | openai | bedrock | none
  model: llama3            # Model name for the provider
  base_url: null           # Custom API base URL (optional)
  api_key: null            # API key -use env vars instead
  region: null             # AWS region for Bedrock provider
  temperature: 0.7         # Generation temperature
  max_tokens: 2048         # Max tokens per generation

server:
  host: 0.0.0.0            # Listen address
  port: 8080               # Listen port

storage:
  database: ./data/sundew.db       # SQLite database path
  log_file: ./data/events.jsonl    # JSONL event log path

logging:
  level: info              # debug | info | warning | error
  output: stdout           # stdout | file path

Traps

Enable or disable individual trap surfaces:

traps:
  mcp_server: true
  rest_api: true
  ai_discovery: true

Disabling a trap removes its routes entirely -no 404s, no trace.

Persona

The persona field controls identity generation:

Value	Behavior
`auto`	Generate a random persona on first run
File path	Load a custom persona from YAML

# Random persona
persona: auto

# Custom persona
persona: ./my-persona.yaml

See custom personas for the full persona schema.

LLM providers

Sundew uses an LLM to generate response templates at deploy time. Supported providers:

Ollama (local)
Anthropic
OpenAI
Bedrock
None

llm:
  provider: ollama
  model: llama3

No API key needed. Requires Ollama running locally.

llm:
  provider: anthropic
  model: claude-sonnet-4-6

Set ANTHROPIC_API_KEY in your environment.

llm:
  provider: openai
  model: gpt-4o

Set OPENAI_API_KEY in your environment.

llm:
  provider: bedrock
  model: us.anthropic.claude-sonnet-4-6
  region: us-west-2

Uses AWS credentials from your environment (aws login / AWS_ACCESS_KEY_ID). Install with pip install sundewsh[bedrock]. Requires model access enabled in your AWS account.

llm:
  provider: none

Uses pre-built persona packs only. No LLM required.

LLM calls happen only at deploy time during persona generation. There are zero LLM calls during runtime operation -all responses are served from the pre-generated template cache.

Server

server:
  host: 0.0.0.0
  port: 8080

These can be overridden via CLI flags:

sundew serve --host 127.0.0.1 --port 9090

Storage

storage:
  database: ./data/sundew.db
  log_file: ./data/events.jsonl

SQLite -structured storage for queries and session analysis
JSONL -append-only streaming log with automatic rotation (100 MB default, 5 backups)

Environment variables

Sensitive values should be set as environment variables rather than in config:

Variable	Purpose
`ANTHROPIC_API_KEY`	API key for Anthropic LLM provider
`OPENAI_API_KEY`	API key for OpenAI LLM provider
`AWS_DEFAULT_REGION`	AWS region for Bedrock provider (fallback if `llm.region` not set)
`SUNDEW_LOG_LEVEL`	Override logging level

Getting started

Concepts

Guides

Security

Full reference

Traps

Persona

LLM providers

Server

Storage

Environment variables

​Full reference

​Traps

​Persona

​LLM providers

​Server

​Storage

​Environment variables

Full reference

Traps

Persona

LLM providers

Server

Storage

Environment variables