remit-cli

Skill MD · Docs · Agent Spec

Command-line interface for Remit — USDC payments for AI agents on Base.

Install

Prebuilt binary (Linux)

Static musl builds with zero dependencies — works on any Linux including Ubuntu 20.04+, Alpine, Colab, Docker scratch:

# x86_64
curl -fsSL https://github.com/remit-md/remit-cli/releases/latest/download/remit-x86_64-unknown-linux-musl.tar.gz | tar xz
sudo mv remit /usr/local/bin/

# aarch64
curl -fsSL https://github.com/remit-md/remit-cli/releases/latest/download/remit-aarch64-unknown-linux-musl.tar.gz | tar xz
sudo mv remit /usr/local/bin/

Note: musl builds do not include OS keychain support. Use remit signer init --no-keychain for encrypted file storage.

Build from source

git clone https://github.com/remit-md/remit-cli.git
cd remit-cli
cargo install --path .

Setup

With CLI signer (default, recommended)

The CLI signer uses an encrypted keystore at ~/.remit/keys/. Private keys are AES-256-GCM encrypted at rest with scrypt KDF. SDKs call remit sign as a subprocess — no HTTP server, no ports, no network.

remit signer init                 # generates wallet + encrypted keystore
export REMIT_SIGNER_KEY=your-password

With OWS

OWS encrypts keys locally and evaluates spending policies before every signature.

remit init --ows                  # creates OWS wallet + policy + API key
export OWS_WALLET_ID=remit-my-agent
export OWS_API_KEY=<shown by init>

With a raw private key (legacy)

remit init --legacy --write-env   # generates key, saves to .env
# or
export REMITMD_KEY=0x<your-private-key>

Wallet Modes

The CLI supports three wallet modes. It checks them in priority order:

If a keystore exists at ~/.remit/keys/default.enc and REMIT_SIGNER_KEY is set, the CLI signs in-process using the encrypted key. Otherwise it falls back to OWS, then raw key.

Quickstart

remit status                                          # Wallet info + balance
remit pay 0xRecipient 10.00                           # Send 10 USDC
remit tab open 0xProvider 100 --per-unit 2.50         # Open tab (100 USDC limit, 2.50/unit)
remit tab charge <tab-id> 2.50 --cumulative 2.50      # Charge 2.50 USDC
remit tab close <tab-id> --final-amount 5.00 --provider-sig 0x...  # Settle tab
remit wallet fund                                     # Open fund link in browser
remit --testnet mint 100                              # Mint 100 testnet USDC

Commands

Global Flags

init Flags

sign Flags

tab Flags

fund Flags

update Flags

If the CLI detects it was installed via a package manager (Homebrew, Scoop, cargo, npm, snap), it prints the appropriate update command instead of self-updating.

Auth

CLI signer (default, recommended)

remit signer init                     # one-time setup — generates encrypted keystore
export REMIT_SIGNER_KEY=your-password

Keys are AES-256-GCM encrypted at ~/.remit/keys/default.enc. The CLI decrypts in-process when signing. SDKs invoke remit sign as a subprocess — no HTTP server, no ports, no network exposure.

OWS

remit init --ows                      # one-time setup
export OWS_WALLET_ID=remit-my-agent   # wallet name from init
export OWS_API_KEY=<token>            # shown once by init

Keys live in ~/.ows/wallets/ (AES-256-GCM encrypted). Never appear in env vars.

Raw key (legacy)

export REMITMD_KEY=0x<your-private-key>

Or remit init --legacy --write-env to generate and save to .env.

Never commit private keys to git.

Shell Completions

remit completions bash >> ~/.bash_completion           # bash
remit completions zsh > "${fpath[1]}/_remit"           # zsh
remit completions fish > ~/.config/fish/completions/remit.fish  # fish
remit completions powershell >> $PROFILE               # PowerShell

JSON Output

All commands support --json for scripting:

remit --json balance | jq '.usdc'
remit --json status | jq '.monthly_volume'
remit --json webhook list | jq '.[].url'

License

MIT