SurfSense Wiki

configuration-guide

3 min read

Service or container restart is required for changes to take effect.

Disable View Chat History

Hides chat history from the frontend admin interfaces and embeds. Does not delete history, affect user-facing history, or block API-based history access.

  • Enable: Set to any value. 
    DISABLE_VIEW_CHAT_HISTORY="enable"
  • Disable: Remove or comment out the variable.

Workspace Deletion Protection

Prevents workspace deletion from UI and API (DELETE /v1/workspace/:slug returns 403).

  • Enable: Set to any value. 
    WORKSPACE_DELETION_PROTECTION="enable"
  • Disable: Remove or comment out the variable.

Simple SSO Passthrough

Generates single-use, temporary authentication links (1-hour expiry, 30-day session) for existing users. Prerequisites: Enable multi-user mode, create an admin user, and complete onboarding before enabling.

  • Enable: Set to any value. 
    SIMPLE_SSO_ENABLED="enable"
  • Generate Token API Call: 
    curl -X GET "https://your-anythingllm-instance.com/api/v1/users/{id}/issue-auth-token" \
  -H "Authorization: Bearer {api_key}"
  • Login URL Format: 
    https://your-anythingllm-instance.com/sso/simple?token={token}&redirectTo={optional_path}
  • Disable Login Page & Invitations: 
    SIMPLE_SSO_ENABLED="enable"
SIMPLE_SSO_NO_LOGIN="enable"
  • Redirect Unauthenticated Users: 
    SIMPLE_SSO_ENABLED="enable"
SIMPLE_SSO_NO_LOGIN="enable"
SIMPLE_SSO_NO_LOGIN_REDIRECT="https://your-bespoke-login-page.com"
  • Disable: Remove or comment out the variables.

AnythingLLM Hub Agent Skills

Controls the downloading of agent skills from the AnythingLLM Hub.

  • Enable (Verified/Private Only): 
    COMMUNITY_HUB_BUNDLE_DOWNLOADS_ENABLED="1"
  • Enable (Allow All / Unverified): 
    COMMUNITY_HUB_BUNDLE_DOWNLOADS_ENABLED="allow_all"
  • Disable: Remove or comment out the variable.

Local IP Address Scraping

Allows the document collector to scrape local IP addresses.

  • Enable: 
    COLLECTOR_ALLOW_ANY_IP="true"
  • Disable: Remove or comment out the variable.

Disable Streaming for Generic OpenAI Provider

Disables streaming responses for custom/generic OpenAI endpoints.

  • Enable: 
    GENERIC_OPENAI_STREAMING_DISABLED="true"
  • Disable: Remove or comment out the variable.

Custom Session TTL

Overrides the default 30-day session TTL. Minimum value is 5 minutes. Accepts Vercel ms format strings.

  • Enable: 
    JWT_EXPIRY="1d"
  • Disable: Remove or comment out the variable.

Disable Swagger API Documentation

Disables the API documentation endpoint at /api/docs.

  • Enable: 
    DISABLE_SWAGGER_DOCS="true"
  • Disable: Remove or comment out the variable.

Native Tool Calling for LLM Providers

Forces specific local LLM providers to fallback to prompt-based tool calling. (Has no effect on OpenAI or Anthropic).

  • Disable Native Tool Calling for Specific Providers: 
    PROVIDER_DISABLE_NATIVE_TOOL_CALLING="groq,openrouter"
  • Disable Native Tool Calling for All Supported Providers: 
    PROVIDER_DISABLE_NATIVE_TOOL_CALLING="generic-openai,bedrock,localai,groq,litellm,openrouter,lemonade"
  • Enable: Native tool calling is enabled by default. Remove or comment out the variable.

Automatic Tool Call Approval

Bypasses manual approval prompts for specified agent skills.

  • Enable: 
    # Approve all skills
AGENT_AUTO_APPROVED_SKILLS="<all>"
 
# Approve specific skills by ID
AGENT_AUTO_APPROVED_SKILLS="create-pdf-file,create-docx-file"
  • Disable: Remove or comment out the variable.

LLM Provider Timeout

Overrides default 10-minute timeout for outbound LLM SDK requests. Value is in milliseconds.

  • Enable: 
    ANYTHINGLLM_FETCH_TIMEOUT="1200000"
  • Disable: Remove or comment out the variable.

SDK Max Retries

Configures retry attempts for failed LLM provider SDK requests. Defaults to 0.

  • Enable: 
    ANYTHINGLLM_MAX_RETRIES="2"
  • Disable: Remove or comment out the variable.

Require Allowlist for Embed Widgets

Forces public chat embeds to reject all cross-origin requests unless they have an explicit domains allowlist configured.

  • Enable: 
    EMBED_REQUIRE_ALLOWLIST="enable"
  • Disable: Remove or comment out the variable.

Graph View