Command-line (CLI)

The @guveno/cli wraps the SDK to manage your server-side wallets from the terminal. Handy for scripts, CI and quick checks. It authenticates with an API key.

Install

The CLI builds on the SDK and exposes a guveno command:

npm install -g @guveno/cli

guveno --help

Authentication

Run guveno init once to save your API key locally, then every command uses it. You can also pass --api-key gv_live_... inline or read it from an environment variable ($GUVENO_API_KEY). The base URL defaults to the production API; advanced users can override it (see Advanced configuration).

# Save your key once (prompts if you omit --api-key)
guveno init --api-key gv_live_your_key_here

# ...or per-command, from an environment variable
export GUVENO_API_KEY=gv_live_your_key_here
guveno list-wallets --json

Commands that create, derive, reveal, or sign need your encryption password to unlock your key. Provide it with --encryption-password, --encryption-password-env, the $GUVENO_ENCRYPTION_PASSWORD variable, or the interactive prompt. Only the API key and an optional base URL are stored on disk (under ~/.guveno); your encryption password and recovery phrases are not. If key file protection is enabled, also pass --key-file /secure/original-photo.png. The exact file contents are read locally and never uploaded or saved to CLI configuration.

Commands

• Setup: init, whoami, logout.
• Vaults: list-vaults, get-vault. Wallet creation takes --vault <id> to add a chain wallet to an existing vault, --vault-name and --team for a new one, and --derivation-path for a custom prefix.
• Wallets: create-wallet, import-wallet, list-wallets (--vault filter), get-wallet, derive-address, list-addresses, rename-wallet, delete-wallet, reveal-mnemonic.
• Balances: balances, totals, stats, company-balances.
• Webhooks: create-webhook, list-webhooks, webhook-deliveries, webhook-delivery, delete-webhook.
• Withdrawals: withdraw.

Every command also accepts --json for machine-readable output.

Examples

# One-time setup
guveno init --api-key gv_live_your_key_here

# Create a wallet (prints the recovery phrase once for backup) and derive an address
export GUVENO_ENCRYPTION_PASSWORD=...   # unlocks your key
guveno create-wallet treasury-btc --chain bitcoin --words 24 --vault-name Treasury
guveno derive-address 12 --label fees --json

# Add an Ethereum wallet to the same vault (same phrase, no new backup)
guveno list-vaults
guveno create-wallet treasury-eth --chain ethereum --vault 3fa85f64-5717-4562-b3fc-2c963f66afa6

# List wallets and subscribe to events
guveno list-wallets --json
guveno create-webhook --type api --url https://example.com/hook --all-events

Wallets, addresses and the (sealed) recovery phrase live on the server; the local directory is just a cache for your API key. All signing and decryption run locally; secrets never leave your machine.