> Guveno API reference v1.10.0, last updated October 17, 2026. The whole reference is at https://www.guveno.com/llms-full.txt.

## Command-line (CLI)

The @guveno/cli wraps the SDK to manage your server-side wallets from the terminal. Handy for scripts, CI and quick checks. It authenticates with an API key.

[@guveno/clion npm→](https://www.npmjs.com/package/@guveno/cli)

### Install

The CLI builds on the SDK and exposes a `guveno` command:

```
npm install -g @guveno/cli

guveno --help
```

### Authentication

Run `guveno init` once to save your API key locally, then every command uses it. You can also pass `--api-key gv_live_...` inline or read it from an environment variable (`$GUVENO_API_KEY`). The base URL defaults to the production API; advanced users can override it (see Advanced configuration).

```
# Save your key once (prompts if you omit --api-key)
guveno init --api-key gv_live_your_key_here

# ...or per-command, from an environment variable
export GUVENO_API_KEY=gv_live_your_key_here
guveno list-wallets --json
```

Commands that create, derive, reveal, or sign need your **encryption password** to unlock your key. Provide it with `--encryption-password`, `--encryption-password-env`, the `$GUVENO_ENCRYPTION_PASSWORD` variable, or the interactive prompt. Only the API key and an optional base URL are stored on disk (under `~/.guveno`); your encryption password and recovery phrases are not. If key file protection is enabled, also pass `--key-file /secure/original-photo.png`. The exact file contents are read locally and never uploaded or saved to CLI configuration.

### Commands

- **Setup**: `init`, `whoami`, `logout`.
- **Vaults**: `list-vaults`, `get-vault`. Wallet creation takes `--vault <id>` to add a chain wallet to an existing vault, `--vault-name` and `--team` for a new one, and `--derivation-path` for a custom prefix.
- **Wallets**: `create-wallet`, `import-wallet`, `list-wallets` (`--vault` filter), `get-wallet`, `derive-address`, `list-addresses`, `rename-wallet`, `delete-wallet`, `reveal-mnemonic`.
- **Balances**: `balances`, `totals`, `stats`, `company-balances`.
- **Webhooks**: `create-webhook`, `list-webhooks`, `webhook-deliveries`, `webhook-delivery`, `delete-webhook`.
- **Withdrawals**: `withdraw`.

Every command also accepts `--json` for machine-readable output.

### Examples

```
# One-time setup
guveno init --api-key gv_live_your_key_here

# Create a wallet (prints the recovery phrase once for backup) and derive an address
export GUVENO_ENCRYPTION_PASSWORD=...   # unlocks your key
guveno create-wallet treasury-btc --chain bitcoin --words 24 --vault-name Treasury
guveno derive-address 12 --label fees --json

# Add an Ethereum wallet to the same vault (same phrase, no new backup)
guveno list-vaults
guveno create-wallet treasury-eth --chain ethereum --vault 3fa85f64-5717-4562-b3fc-2c963f66afa6

# List wallets and subscribe to events
guveno list-wallets --json
guveno create-webhook --type api --url https://example.com/hook --all-events
```

Wallets, addresses and the (sealed) recovery phrase live on the server; the local directory is just a cache for your API key. All signing and decryption run locally; secrets never leave your machine.

Source: https://www.guveno.com/docs/cli/