Reference

Authoritative, lookup-oriented reference material for Dapper. Every page here documents a concrete surface — the YAML config schema, the ./dapper CLI, environment variables, vulnerability coverage, output layout, and LLM provider settings — with full field tables, constraints, and copy-paste examples. These pages mirror the source of truth in the repo (configs/config-schema.json, the dapper script, .env.example, and COVERAGE.md), so a developer can rely on them without reading the code.

If you are just getting started, begin with the Get started and Guides sections; come back here when you need exact field names, defaults, and constraints.

Config

Configuration

The full YAML schema: auth, login flows, focus/avoid rules.

Output

Output & deliverables

The audit-logs structure: reports, metrics, and agent logs.

CLI

CLI commands

Every command and flag for the ./dapper script.

Env

Environment variables

Credentials, providers, and web-console settings.

Coverage

Vulnerability coverage

What Dapper finds and exploits, mapped to OWASP WSTG.

Models

LLM providers

Anthropic by default; experimental router mode for others.

---

Table of contents

• Configuration
• CLI commands
• Output & deliverables
• Environment variables
• Vulnerability coverage
• LLM providers