Agent index (llms.txt) — fetch this first, then the page it names.

CLI reference (rw)

rw is RootWallet in the terminal (package @debros/root-cli). Run rw <command> --help for anything not listed. Many read commands accept --json.

Wallet and session

CommandWhat it does
rw init [--force] [--mnemonic-file <path>] [--test-wallet [--adopt] [--mnemonic-out <path>]]Create a wallet
rw import [--force]Import a recovery phrase
rw unlock [--ttl <minutes>]Start a session (1 to 1440 minutes, default 30)
rw lockEnd the session
rw change-passwordChange the wallet password
rw exportPrint the recovery phrase. Refuses a non-terminal unless RW_ALLOW_INSECURE_EXPORT=1

Accounts

CommandWhat it does
rw accounts [--json] [--archived]List accounts
rw address [--chain evm / solana / bitcoin / orama] [--anchor] [--json]Show an address
rw account create, switch <index>, rename <index> <name>, delete <index>, restoreManage accounts (delete archives)
rw account import [--chain evm / solana / bitcoin]Import a single private key
rw account export <index or name> --chain <c> [--xprv]Export a private key

Chains and money

CommandWhat it does
rw network, rw network list, rw network set <id>Show or change the network
rw balance [--chain] [--strict] [--json]Balance. --strict exits non-zero when a Bitcoin balance is only a lower bound
rw tokens [--chain] [--token <addr>] [--json]Token balances
rw send <to> <amount> [--chain evm / solana / bitcoin / orama] [--token <addr>] [--allow-off-curve] [--memo <text>] [--tip <norama>]Send
rw tx <hash> [--chain] [--json]Look up a transaction
rw history [--chain] [--limit n] [--json]History
rw airdrop [--amount <sol>]Test SOL on devnet or testnet
rw btc rescan [--mode rescan / resume / refresh] [--max-index n] [--json]Discover Bitcoin addresses
rw btc addresses [--branch receive / change / all] [--used] [--json]List Bitcoin addresses

Signing, NFTs, ORAMA

CommandWhat it does
rw sign <message> [--chain evm / solana] [--account <index>]Sign a message. Refuses reserved Orama formats
rw verify <message> <signature> [--address <addr>] [--chain]Verify
rw nft list [--chain] [--contract <addr>], show <address> [tokenId], send <address> <tokenId> <to>NFTs
rw stake delegate, undelegate <validator> <amt>, redelegate <from> <to> <amt>, withdraw-rewards <validator>Staking (add --chain orama, --memo, --tip)
rw vote <proposal> yes / no / abstain --chain orama [--house token / operator]Governance vote

Vault

CommandWhat it does
rw vault add <site> [--template pin], get, list, rotate, rmLogins
rw vault import-csv <file>Import a Bitwarden CSV
rw vault export [--output <file>], rw vault import <file>Encrypted export and import
rw vault ssh add <host[:port]/user> [--label], get [--pub] [--priv], list, connect, exec <target> -- <cmd>, provision, agent-load [targets] [--all] [--ttl], rotate, rm [-y], import <pem>SSH keys
rw vault note add, get <title>, list, rm <title>Secure notes
rw vault card add, get <label>, list, rm <label>Payment cards
rw vault totp list, get <label>, add <label>, rm <label> [--yes]Authenticator codes
rw vault sync enable, now, status, disableDevelopment builds only

Utilities

CommandWhat it does
rw test-agent start --dir <dir> --approve-orama <path>, stop --dir <dir> [--purge]Run the headless development agent
rw completion bash / zsh / fishShell completion
rw --versionVersion

Exit codes

CodeMeaning
1User or other error
2Transient failure (RPC, unfinished scan, vault busy)
3Authentication failure
4Not found

RW_DEBUG=1 prints stack traces.

Environment variables

VariablePurpose
ROOTWALLET_PASSWORDNon-interactive wallet password for unlock and init
RW_RPC_URL_<NETWORK>Custom endpoint for one network
RW_ORAMA_NS_URLLoopback-only namespace override
RW_ORAMA_READ_URL, RW_ORAMA_CA_FILEORAMA read proxy and a CA bundle for your own proxy
RW_ALLOW_INSECURE_EXPORTAllow rw export to a non-terminal
RW_AGENT_SOCKAgent socket path (used by clients of the agent)

~/.rootwallet/config.json holds rpc.urls, the network selection and ORAMA options. The old rpc.heliusApiKey and rpc.alchemyApiKey keys are refused. The CLI itself never connects to the agent socket.