Skip to main content

​
What you will learn

  • How to import an existing private key
  • How to import from a BIP-39 mnemonic
  • How to generate a new random key
  • How to list available keystore addresses

​
Overview

The Clavion CLI (clavion-cli) manages the encrypted keystore that ISCL Core uses for transaction signing. Keys are encrypted at rest using scrypt + AES-256-GCM and stored in the keystore directory. 
npx clavion-cli <command> [options]

​
Commands

​
key import

Import a private key from stdin. The key is encrypted and stored in the keystore. 
echo "0xYourPrivateKeyHex" | npx clavion-cli key import
The CLI prompts for a passphrase to encrypt the key. In non-interactive environments, the passphrase can be provided via the ISCL_DEMO_PASSPHRASE environment variable.
Never pass private keys as command-line arguments — they will appear in shell history and process listings. Always pipe from stdin or a file.

​
key import-mnemonic

Import a wallet from a BIP-39 mnemonic phrase. Derives the key using the standard Ethereum derivation path (m/44'/60'/0'/0/0 by default). 
echo "your twelve word mnemonic phrase goes here" | npx clavion-cli key import-mnemonic
Options:
FlagDefaultDescription
--account-index &lt;n&gt;0BIP-44 account index
--address-index &lt;n&gt;0BIP-44 address index
Example with custom derivation: 
echo "your mnemonic..." | npx clavion-cli key import-mnemonic --account-index 0 --address-index 2
This derives from path m/44'/60'/0'/0/2.

​
key generate

Generate a new random private key, encrypt it, and store it in the keystore. 
npx clavion-cli key generate
Output: 
Generated new key
Address: 0x1234567890abcdef1234567890abcdef12345678
Stored in: /Users/you/.iscl/keystore/0x1234...5678.json

​
key list

List all addresses in the keystore. 
npx clavion-cli key list
Output: 
Keystore: /Users/you/.iscl/keystore
Addresses:
  0x1234567890abcdef1234567890abcdef12345678
  0xabcdef1234567890abcdef1234567890abcdef12

​
Global options

FlagDefaultDescription
--keystore-path &lt;dir&gt;~/.iscl/keystoreDirectory for encrypted keystore files
Example: 
npx clavion-cli key list --keystore-path /custom/path/keystore

​
Keystore format

Keys are stored as individual JSON files named by address (e.g., 0x1234...5678.json). Each file contains:
  • Encrypted private key (AES-256-GCM)
  • Scrypt parameters (salt, N, r, p)
  • IV and auth tag for authenticated decryption
The keystore format is designed for ISCL only — it is not compatible with Ethereum keystore v3 (used by Geth/Clef).

​
Verification

After importing or generating a key, verify it: 
# List keys
npx clavion-cli key list

# Start ISCL Core and check that signing works
npm run dev
# Then submit a TxIntent -- signing should succeed

​
Next steps

  • Quick Start — Use the imported key to execute a transaction
  • Demo Flow — Complete transaction lifecycle walkthrough
  • Configuration — Keystore path and passphrase settings