Configuration

Configuration

Environment Variables

Core Settings

Variable	Type	Default	Required	Description
MAREF_SAFETY_LEVEL	enum	development	No	development, staging, production
MAREF_PORT	int	8000	No	Service listening port
MAREF_LOG_LEVEL	enum	info	No	debug, info, warning, error
MAREF_HMAC_KEY	string	—	Yes (prod)	Audit log HMAC signing key
MAREF_TRUST_DB	path	./trust.db	No	Trust score database

GUI Settings

Variable	Type	Default	Description
MAREF_GUI_PORT	int	3000	GUI web interface port
MAREF_GUI_THEME	string	dark	dark, light, auto

Sidecar Settings

Variable	Type	Default	Description
SIDECAR_PORT	int	8000	MCP sidecar port
SIDECAR_MCP_TRANSPORT	enum	stdio	stdio, sse, streamable-http

---

Configuration File

MAREF reads configuration from:

1. Environment variables (highest priority)
2. .env file in project root
3. ~/.maref/config.yaml user config
4. Built-in defaults (lowest priority)

Example .env

# Core
MAREF_SAFETY_LEVEL=production
MAREF_PORT=8000
MAREF_LOG_LEVEL=info

# Security
MAREF_HMAC_KEY=your-secret-hmac-key-here

# Sidecar
SIDECAR_PORT=8000
SIDECAR_MCP_TRANSPORT=sse

# Observability
OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318
PROMETHEUS_PORT=9090

Example config.yaml

governance:
  safety_level: production
  circuit_breaker_threshold: 3
  cooldown_seconds: 30

trust:
  goodhart_detection: true
  uncertainty_quantification: true

observability:
  otel_enabled: true
  prometheus_enabled: true
  structured_logging: true

desktop:
  screenshot_interval_ms: 500
  safety_domain_whitelist:
    - "*.example.com"

---

pyproject.toml

Key configuration in pyproject.toml:

[project]
name = "maref"
version = "0.30.0"
requires-python = ">=3.10"

[tool.ruff]
line-length = 120
target-version = "py310"

[tool.mypy]
strict = true
warn_return_any = true

---

← Back to Home