Ika CLI

Command-line interface for the Ika decentralized MPC signing network on Sui.

References (detailed command reference and JSON schemas)

• - references/commands.md - Full command reference with all flags, arguments, and examples
• INLINECODE1 - JSON output schemas for --json flag on every command

Install

CODEBLOCK0

Requires: Sui CLI (sui keytool for key management)

Global Flags

All commands support these flags:

Flag	Description
INLINECODE4	Output results as JSON (machine-parseable). Errors also output as JSON.
INLINECODE5

Custom Sui client config path |
| --ika-config <PATH> | Custom Ika network config path (default for all dwallet subcommands) |
| --gas-budget <MIST> | Override default gas budget (default for all dwallet subcommands) |
| -y, --yes | Skip confirmation prompts |
| -q, --quiet | Suppress human-readable output (JSON still printed with --json -q) |

Command Overview

CODEBLOCK1

Curves, Algorithms, and Hash Schemes

Commands accept named values (not numeric IDs):

Parameter	Accepted values
INLINECODE11	INLINECODE12, secp256r1, ed25519, INLINECODE15
INLINECODE16

ecdsa, taproot, eddsa, schnorrkel |
| --hash-scheme | keccak256, sha256, double-sha256, sha512, merlin |

Quick Start

Create a dWallet

CODEBLOCK2

Secret Share Handling

The secret share can be provided in three ways (in priority order):

1. 1. --secret-share <file> — read from a local file
2. INLINECODE28 — pass directly as hex
3. Omit both — the CLI derives the decryption key from your Sui keystore (seed args), fetches the encrypted share from chain, and decrypts it. Requires --dwallet-id.

Batch Presigns

CODEBLOCK3

List and Inspect

CODEBLOCK4

Future Signing (two-step)

CODEBLOCK5

Seed derivation: Encryption keys are derived stateless from the active Sui keystore address. Use --seed-file <PATH> for raw 32-byte seed, --address <ADDR> for a specific keystore address, or --encryption-key-index <N> for multiple keys per address. Pass --legacy-hash for keys registered before the V2 hash fix (only affects non-SECP256K1 curves).

Auto-detection: IKA/SUI coins are auto-detected from the active wallet. Curve, DKG output, and presign output are auto-fetched from chain when --dwallet-id and --presign-cap-id are provided.

Validator Operations

CODEBLOCK6

Key Management

Sui wallet keys are managed by sui keytool:

CODEBLOCK7

dWallet encryption keys are derived stateless from Sui keystore addresses (no local file storage). The CLI uses keccak256(keypair_bytes || index) to derive a 32-byte seed, then hashes with domain separators to produce class-groups and Ed25519 keys.

JSON Output

All commands support --json for structured output:

CODEBLOCK8