SeedTools currently does not include a standalone CLI module.
This document defines the planned public API surface for the upcoming seedtools_cli package, based on:
- the Core module capabilities
- the CLI Roadmap
- deterministic and hardened‑mode design principles
The CLI will provide a secure, deterministic command‑line interface for:
- mnemonic validation
- entropy tools
- Bitcoin key derivation
- Ethereum key derivation
- address generation
- forensics workflows (future)
This API specification defines what the CLI will expose, once implemented.
The SeedTools CLI will be:
- deterministic
- offline‑first
- hardened‑mode compatible
- safe for air‑gapped and forensics environments
- script‑friendly
- reproducible across platforms
The CLI will serve as a thin, deterministic wrapper around the Core module.
The CLI will be installed as:
seedtools
or via Python:
python -m seedtools
All commands will follow the structure:
seedtools <command> [options]
Validates a BIP39 mnemonic.
seedtools mnemonic validate "<mnemonic>"
Normalizes a mnemonic to deterministic format.
seedtools mnemonic normalize "<mnemonic>"
Converts mnemonic → entropy.
seedtools mnemonic to-entropy "<mnemonic>"
Converts entropy → mnemonic.
seedtools mnemonic from-entropy "<hex_entropy>"
Derives a BIP32 seed from a mnemonic.
seedtools seed derive "<mnemonic>" --passphrase "<optional>"
Derives a key using a BIP32 path.
seedtools bip32 derive "<seed_hex>" --path "m/84'/0'/0'/0/0"
Derives a BIP44 address.
seedtools bip44 address "<seed_hex>" --index 0 --change 0
seedtools address p2pkh "<pubkey_hex>"
seedtools address p2wpkh "<pubkey_hex>"
seedtools address p2sh-p2wpkh "<pubkey_hex>"
seedtools address p2tr "<pubkey_hex>"
seedtools eth derive "<seed_hex>" --path "m/44'/60'/0'/0/0"
seedtools eth address "<privkey_hex>"
One‑shot derivation:
seed → private key → address
seedtools entropy score "<hex_entropy>"
seedtools entropy validate "<hex_entropy>"
These commands are defined in the roadmap and will be implemented later:
- mnemonic recover
- entropy detect-drift
- seed infer
- shamir validate
See: CLI Roadmap.
CLI output will be:
- deterministic
- plain text
- stable across platforms
- hardened‑mode safe
- without ANSI colors (in hardened mode)
- without logs
- without clipboard usage
The CLI will guarantee:
- deterministic execution
- no randomness
- no networking
- no disk writes
- zeroization of sensitive buffers
- hardened‑mode compatibility
- reproducible output
See: Hardened Mode.
The CLI test suite will include:
- deterministic command tests
- hardened‑mode tests
- reproducibility tests
- cross‑platform tests
- docs/api/index.md (API table of contents)