CLI Tool¶

The SigID CLI (sigid) is the command-line interface for agent identity workflows. It covers local key management, agent registration, challenge-response authentication, token caching, signing, verification, and key lifecycle operations.

This CLI is not a Dashboard administration tool or a general Management API client. For interactive human login from a terminal it supports OAuth device authorization via auth --mode device. For HTTP API integration patterns, see API And SDK Reference.

What this page is for¶

Use this page when you need to:

• generate and store agent signing keys locally
• initialize a self-registered agent from a terminal
• authenticate an agent with challenge-response
• inspect cached agent tokens
• buy x402-protected resources as an authenticated agent
• sign and verify local payloads
• register, rotate, revoke, or remove agent keys
• script agent identity operations in development or CI

Install and verify¶

From npm (recommended)¶

Prebuilt native binaries for Linux and macOS (x64 / arm64):

npx @sigid/cli --version
npx @sigid/cli setup --name my-agent --redirect-uri http://localhost:3000/

# or install globally / as a project dependency
npm install -g @sigid/cli
sigid --help

The @sigid/cli package is a thin Node wrapper; the real tool is the platform-specific sigid binary shipped via optionalDependencies (@sigid/cli-linux-x64, @sigid/cli-linux-arm64, @sigid/cli-darwin-x64, @sigid/cli-darwin-arm64).

The Linux x64 and arm64 packages use statically linked musl binaries and do not require a particular glibc version from the host environment.

From source¶

cargo install --path crates/sigid-cli

Use source install on unsupported platforms (e.g. Windows) or when developing the CLI itself.

Verify the installed binary:

sigid --version
sigid --help

Before you start¶

The CLI stores local configuration and sensitive data under ~/.config/sigid/ unless your environment overrides the platform config directory.

Passphrase sources are checked in this order:

1. --passphrase
2. --passphrase-stdin
3. --passphrase-file
4. SIGID_PASSPHRASE
5. interactive prompt

--passphrase exists for automation and tests, but it can be captured in shell history. Prefer an interactive prompt, --passphrase-stdin, --passphrase-file, or SIGID_PASSPHRASE in controlled CI environments.

Initialize an agent¶

init generates a key pair, registers the agent, and caches credentials in one flow.

sigid init \
  --idp https://auth.example.com \
  --tenant-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111 \
  --name my-agent \
  --anchor-type did_key \
  --algo ed25519

The CLI:

• generates a local key pair
• registers the agent with /api/v1/agents/auth/register
• falls back to PoW registration through /api/v1/agents/auth/register/pow and /api/v1/agents/auth/register/pow/complete when required
• stores the private key in keys.enc
• caches returned tokens when the tenant admits the agent

Hand Off An Agent-Built Workspace¶

After provisioning and testing, transfer durable ownership of the agent and grant the developer the resources needed to inspect the integration:

sigid handoff \
  --idp https://auth.example.com \
  --organization-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111 \
  --agent-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a222 \
  --application-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a333

--application-id is repeatable. Organization co-ownership is granted by default; pass --grant-org-owner=false only for an agent/application-only transfer. Send the returned fragment-bearing link privately to the intended developer. Acceptance is single-use and transfers the agent's durable owner.

This differs from invite: an invitation grants organization/application access but never transfers the agent identity. See Provision, Test, And Hand Off for the fixture-user, branding, test-manifest, and acceptance sequence.

Authenticate¶

auth supports three modes via --mode:

Agent mode (challenge-response)¶

sigid auth \
  --idp https://auth.example.com \
  --key my-agent \
  --scope "openid wallet:sign"

The CLI:

• loads the local key from the encrypted keystore
• requests /api/v1/agents/auth/challenge
• signs the canonical challenge
• submits /api/v1/agents/auth/verify
• stores the returned tokens in tokens.enc

Autonomous mode (self-register)¶

Creates a new agent identity the same way as init, then runs challenge-response auth with the new key. Emits one result (registration facts + bearer).

Non-interactive use requires a passphrase source (SIGID_PASSPHRASE, --passphrase-file, or --passphrase-stdin). There is no plaintext key-on-disk mode; the local keystore always stays encrypted. Interactive prompts work when a TTY is available.

export SIGID_PASSPHRASE='...'
sigid auth --mode autonomous \
  --idp https://auth.example.com \
  --tenant-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111 \
  --name my-agent \
  --algo ed25519

Device mode (OAuth link login)¶

RFC 8628 device authorization for human login from a terminal. The application must allow the device_code grant and the tenant must have device flow enabled.

sigid auth --mode device \
  --idp https://auth.example.com \
  --client-id YOUR_CLIENT_ID \
  --scope "openid profile offline_access"

The CLI:

• calls POST /oauth/device/code
• always prints the absolute verification link and user code on stderr (including under --output json|yaml|quiet) so the human can open the link while the CLI blocks on the poll loop
• polls POST /oauth/token with grant urn:ietf:params:oauth:grant-type:device_code
• honors authorization_pending, slow_down, access_denied, and expired_token
• caches the human token in tokens.enc (subject_kind=user, with client_id and optional tenant_slug so sigid token --refresh uses /oauth/token)
• omits refresh tokens and ID tokens from every output format; refresh tokens remain available only through the encrypted token cache

This is distinct from sigid delegation, which is agent-initiated AAL2 approval for a delegated agent token, not a human OAuth session.

Inspect identity and tokens¶

Show the current local identity and cached agent context:

sigid whoami

Show a cached token for an IDP:

sigid token --idp https://auth.example.com

Refresh a cached token:

sigid token --refresh --idp https://auth.example.com

Clear cached tokens:

# Clear tokens for one IDP
sigid token --clear --idp https://auth.example.com

# Clear all cached tokens
sigid token --clear

Buy x402-protected resources¶

x402 buy quotes and immediately executes an outbound x402 purchase using the cached agent token for the IDP.

sigid x402 buy \
  --idp https://auth.example.com \
  --url https://merchant.example.com/resource \
  --header "Accept: application/json"

The CLI calls the agent-authenticated /agent/x402/pay/quote route first, then executes the returned quote through /agent/x402/pay/execute. Run sigid auth first if no valid cached token is available.

For merchants using SigID Commerce payment links, use x402 commerce-link. The CLI builds the commerce x402 endpoint and pays it through the same agent outbound x402 flow:

sigid x402 commerce-link \
  --idp https://auth.example.com \
  --merchant https://merchant.example.com \
  --payment-link-token plink_abc123 \
  --buyer-country US \
  --buyer-type business

x402 commerce-link additionally accepts:

For manual quote and execution flows:

sigid x402 quote \
  --idp https://auth.example.com \
  --url https://merchant.example.com/resource

sigid x402 execute \
  --idp https://auth.example.com \
  --quote-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111

sigid x402 status \
  --idp https://auth.example.com \
  --payment-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111

Outbound x402 quotes are short lived. Execute a quote immediately, or use x402 buy for the normal one-step purchase path.

Manage local keys¶

Generate a local key pair:

sigid keygen --algo ed25519 --label my-agent

keygen prints the public key and fingerprint. It does not print the private key. The private key is encrypted and stored in the local keystore.

List local keys:

sigid list-keys

Remove a key from the local keystore:

sigid remove-key --key old-key

remove-key only deletes the local keystore entry. To revoke a registered key on the IDP, use revoke-key.

Register, rotate, and revoke keys¶

Register an additional local key with the IDP:

sigid register-key \
  --idp https://auth.example.com \
  --tenant-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111 \
  --key backup-key

register-key requires a valid cached token. Run sigid auth first if no valid token is available. --tenant-id (or default_tenant_id in config) is required for the key-ownership proof.

Rotate a key:

sigid rotate-key \
  --idp https://auth.example.com \
  --tenant-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111 \
  --old my-agent \
  --new-label my-agent-v2

The CLI generates a new key pair, registers the new key, saves it locally, and deprecates the old key on the IDP.

Deprecate a registered key without rotating:

sigid deprecate-key \
  --idp https://auth.example.com \
  --key old-key

Revoke a key:

sigid revoke-key \
  --idp https://auth.example.com \
  --key compromised-key \
  --reason "key exposed"

deprecate-key soft-retires a key on the IDP (normal lifecycle). revoke-key marks the registered key as compromised. Both preserve the local key; use remove-key to delete the local keystore entry.

Change the keystore passphrase (re-encrypts all local keys under a new Argon2id salt):

sigid change-passphrase

Sign and verify payloads¶

Sign a message:

sigid sign --message "Hello, SigID!" --key my-agent

Sign a file:

sigid sign --file transaction.json --key my-agent

The signature output includes a base64-encoded signature, algorithm, fingerprint, and timestamp.

Verify a message signature:

sigid verify \
  --message "Hello, SigID!" \
  --signature "base64-signature" \
  --public-key "hex-encoded-public-key" \
  --algo ed25519

Verify a file signature:

sigid verify \
  --file transaction.json \
  --signature-file transaction.sig \
  --public-key "hex-encoded-public-key" \
  --algo ed25519

--signature expects a base64-encoded signature. --signature-file reads a raw binary signature file.

Create a GPG-compatible detached signature:

sigid gpg-sign --file artifact.tar.gz --key my-agent
sigid gpg-sign --file artifact.tar.gz --key my-agent --armor

Without --armor, the CLI writes a binary .sig file. With --armor, it writes a .sig.asc file.

Configuration and storage¶

Set defaults with the config subcommand (preferred) or by editing ~/.config/sigid/config.toml:

sigid config set \
  --default-idp https://auth.example.com \
  --default-key my-agent \
  --default-tenant-id 018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111 \
  --output-format json
sigid config show

default_idp = "https://auth.example.com"
default_key = "my-agent"
default_tenant_id = "018f3d44-7d4d-7d5d-8d3b-9f0c4c37a111"
output_format = "json"

Supported environment variables:

Supported global flags:

--output json|yaml|text|quiet|table
--keystore /path/to/keys.enc

Non-localhost IDP URLs must use HTTPS. Local development URLs such as http://localhost:3000 and http://auth.sigid.localhost:3000 are allowed; the CLI bypasses proxies and pins .localhost names to loopback addresses.

Output formats and scripting¶

JSON is the default output format:

sigid whoami --output json

Other formats are available for humans and scripts:

sigid list-keys --output table
sigid token --output quiet   # raw access token only
sigid sign --message hi --output quiet   # raw signature only
sigid whoami --output yaml

Quiet mode emits primary machine-parseable values (raw bearer for token / auth, raw signature for sign, newline-separated labels for list-keys) instead of the human Display block. Table uses the same columnar layout as text for list-like results.

The CLI exits with 0 on success and a non-zero code on errors.

Keystore security¶

The local keystore is designed for agent development and operator workflows:

• private keys are encrypted at rest in keys.enc
• the keystore uses Argon2id-derived keys and AES-256-GCM-SIV encryption
• keystore and token files are written atomically with restrictive permissions
• the token cache is encrypted separately from the private-key keystore
• non-localhost IDP URLs must use HTTPS to avoid exposing bearer tokens

Keep the keystore passphrase outside source control and avoid passing it through shell history.

Common errors¶

Command reference¶

See also¶

• Agent Self-Serve Quickstart
• Provision, Test, And Hand Off
• Agent Authentication
• Agent Registration
• API And SDK Reference