Skip to main content
AgentDbg requires no configuration to get started — every setting has a safe default. When you need to customize behavior, you can use environment variables for one-off overrides or YAML config files for persistent, project-wide or user-wide settings. All data stays local; no account or network is required.

How configuration works

AgentDbg accepts settings in two forms:
  • Environment variables — set in your shell or .env file, effective for a single process invocation.
  • YAML config files — written once and applied automatically to every run in that scope.
The two YAML locations serve different scopes:

Precedence order

When the same setting appears in multiple places, AgentDbg uses the value from the highest-priority source and ignores the rest. From highest to lowest:
  1. Function arguments — values passed directly to @trace(...) or traced_run(...)
  2. Environment variables — only when the variable is explicitly set
  3. Project config.agentdbg/config.yaml in the current working directory
  4. User config~/.agentdbg/config.yaml
  5. Defaults — built-in values listed in the table below
Function arguments always win. If you pass max_llm_calls=10 to @trace(...), it overrides the same setting in env vars and both YAML files.

Complete settings reference

Core settings

Guardrail settings

Guardrails are opt-in. They are all disabled (null) by default and must be set explicitly to take effect.

Full YAML example

The example below shows every available setting. Copy it to .agentdbg/config.yaml in your project root or to ~/.agentdbg/config.yaml as a user-level default, then remove or adjust any line you want to change.
null in YAML means the guardrail is disabled. Remove the key entirely or set it to a number to enable the limit.

Safe-by-default behavior

AgentDbg ships with two design choices that protect you without any configuration:
  • Redaction is on by default. Common secret-bearing keys (api_key, token, authorization, cookie, secret, password) are scrubbed from trace data before it is written to disk. You never accidentally persist an API key.
  • Storage is local by default. Traces land in ~/.agentdbg/ on your own machine. No data is sent to any external service.
Override only what you need. See Redact Secrets from Agent Traces for details on controlling what gets scrubbed, and Local Trace Storage for details on where traces are written and how to move them.