init
Write a starter policy. Add--testnet-accounts to create fresh accounts using the testnet faucet.
Without account creation, review and fill the starter account fields before planning. Keep testnet seed files private.
plan
Parse a policy and display the proposed transactions, signing roles, and enforcement descriptions. This command does not submit transactions.apply
Sign and submit the policy setup using a local owner wallet file. This command refuses mainnet.--wallets is required. --endpoint optionally overrides the network endpoint. Setup spans multiple steps; a failure can leave earlier steps completed. Inspect the results and live state before retrying.
verify
Read ledger state and report how it compares with the policy.--endpoint optionally overrides the endpoint. Verification does not require the owner wallet file. Review all findings, including enforcement limitations.
revoke
Submit owner-signed cleanup steps, then verify the resulting state.--wallets is required. --endpoint optionally overrides the endpoint. Read the final report to confirm the result. Revocation is an owner operation and is not exposed as an agent MCP tool.