Skip to main content

​
sundew serve

Start the honeypot server. 
sundew serve [--host HOST] [--port PORT] [--persona PATH]
FlagDefaultDescription
--host0.0.0.0Listen address
--port8080Listen port
--personaFrom configPath to custom persona file

​
sundew generate

Generate a new persona. 
sundew generate [--industry INDUSTRY] [--seed SEED] [--output FILE] [--json-output]
FlagDefaultDescription
--industryRandomIndustry theme (fintech, saas, healthcare, ecommerce, devtools, logistics)
--seedRandomSeed for deterministic generation
--outputstdoutWrite persona to file
--json-outputfalseOutput as JSON instead of YAML
Examples: 
# Generate a random persona
sundew generate

# Fintech persona with deterministic seed
sundew generate --industry fintech --seed 42

# Export to file
sundew generate --industry healthcare --output personas/hospital.yaml

​
sundew query

Query captured events and sessions. 
sundew query [--last-session] [--type TYPE] [--last DURATION]
FlagDescription
--last-sessionShow the most recent session
--typeFilter by classification: human, automated, ai_assisted, ai_agent
--lastTime window: 1h, 24h, 7d, etc.
Examples: 
# Most recent session
sundew query --last-session

# AI agents in the last day
sundew query --type ai_agent --last 24h

# All automated traffic this week
sundew query --type automated --last 7d

​
sundew stats

Display summary statistics. 
sundew stats
Returns total events, sessions, classification breakdown, top endpoints, and source IPs.

​
sundew mcp-client

Run Sundew as an MCP server for querying captured data from AI tools. 
sundew mcp-client
Add to your MCP config: 
{
  "mcpServers": {
    "sundew": {
      "command": "sundew",
      "args": ["mcp-client"]
    }
  }
}

​
sundew export

Export captured data for research. 
sundew export [--anonymize] [--format FORMAT] [--output FILE]
FlagDefaultDescription
--anonymizefalseHash IPs, bucket timestamps, strip PII
--formatjsonOutput format: json, csv
--outputstdoutWrite to file

​
sundew validate-config

Validate configuration and canary token safety. 
sundew validate-config
Checks that all canary tokens are verifiably fake, config is valid, and persona loads correctly.