NAME:
   Clef - Manage Ethereum account operations

USAGE:
   Clef [global options] command [command options]

VERSION:
   1.101702.2-stable-e8800cff

COMMANDS:
   init           Initialize the signer, generate secret storage
   attest         Attest that a js-file is to be used
   setpw          Store a credential for a keystore file
   delpw          Remove a credential for a keystore file
   newaccount     Create a new account
   importraw      Import a hex-encoded private key.
   gendoc         Generate documentation about json-rpc format
   list-accounts  List accounts in the keystore
   list-wallets   List wallets known to Clef
   help, h        Shows a list of commands or help for one command

GLOBAL OPTIONS:

    --4bytedb-custom value              (default: "./4byte-custom.json")
          File used for writing new 4byte-identifiers submitted via API

    --advanced                          (default: false)
          If enabled, issues warnings instead of rejections for suspicious requests.
          Default off

    --auditlog value                    (default: "audit.log")
          File used to emit audit logs. Set to "" to disable

    --chainid value                     (default: 1)
          Chain id to use for signing (1=mainnet, 17000=Holesky)

    --configdir value                   (default: "/tmp/.clef")
          Directory for Clef configuration

    --keystore value                    (default: "/tmp/.ethereum/keystore")
          Directory for the keystore

    --loglevel value                    (default: 3)
          log level to emit to the screen

    --rules value
          Path to the rule file to auto-authorize requests with

    --signersecret value
          A file containing the (encrypted) master seed to encrypt Clef data, e.g.
          keystore credentials and ruleset hash

    --stdio-ui                          (default: false)
          Use STDIN/STDOUT as a channel for an external UI. This means that an
          STDIN/STDOUT is used for RPC-communication with a e.g. a graphical user
          interface, and can be used when Clef is started by an external process.

    --stdio-ui-test                     (default: false)
          Mechanism to test interface between Clef and UI. Requires 'stdio-ui'.

    --suppress-bootwarn                 (default: false)
          If set, does not show the warning during boot

   ACCOUNT


    --lightkdf                          (default: false)
          Reduce key-derivation RAM & CPU usage at some expense of KDF strength

    --pcscdpath value                   (default: "/run/pcscd/pcscd.comm")
          Path to the smartcard daemon (pcscd) socket file

   API AND CONSOLE


    --http                              (default: false)
          Enable the HTTP-RPC server

    --http.addr value                   (default: "localhost")
          HTTP-RPC server listening interface

    --http.port value                   (default: 8550)
          HTTP-RPC server listening port

    --http.vhosts value                 (default: "localhost")
          Comma separated list of virtual hostnames from which to accept requests (server
          enforced). Accepts '*' wildcard.

    --ipcdisable                        (default: false)
          Disable the IPC-RPC server

    --ipcpath value
          Filename for IPC socket/pipe within the datadir (explicit paths escape it)

   MISC


    --help, -h                          (default: false)
          show help

    --version, -v                       (default: false)
          print the version


COPYRIGHT:
   Copyright 2013-2026 The go-ethereum Authors