CLI reference

The warden commands.

Every command accepts two global flags: --vault <dir> (or $WARDEN_VAULT) to pick the vault, and --password-stdin to read secrets from stdin instead of prompting (for automation).

Command	What it does
`init`	Create a vault.
`wallet`	Create and list wallets.
`secret`	Store credentials.
`policy`	Pin, lint, and simulate policies.
`warrant`	Issue, list, and revoke warrants.
`sign`	Authorize and sign a transaction.
`mcp`	Run the stdio MCP server exposing a warrant's tools.
`run`	Launch an agent wired for governed access.
`register`	Register the vault on-chain.
`audit`	Verify and anchor the audit log.
`config`	Show and set vault config.

Run warden <command> --help for the complete flag list.