sundew-sh/sundew

Based on the README, here's a technical summary: Sundew uses a **persona engine** to generate unique deployment identities at runtime—shaping endpoint paths, response formats, timing profiles, and server headers so agents gain no transferable knowledge between instances. Real-time fingerprinting scores five behavioral signals (timing consistency, enumeration patterns, headers, MCP protocol usage, prompt leakage) through a classification pipeline to distinguish human visitors from autonomous agents with ~0.9+ confidence. The honeypot exposes both **MCP server traps** with persona-appropriate tools and **REST API traps** with OpenAPI specs and AI plugin manifests—the actual attack surfaces agents target—with optional pre-generated caching via local Ollama or cloud LLMs.