Skip to content

Candle's commands in the Candle Harness

The Candle Harness does everything the candle CLI does. Ask your agent in plain English (“revoke the key ending ab12”, “what are my LP positions?”) and it carries the command out under the rule below. It uses Candle’s MCP tools where one fits, and otherwise runs the real candle CLI through the Candle Harness’s core, which checks every command against this table first.

In the Candle Harness, ctrl-k opens the palette, which lists the same commands after the Candle Harness’s own (? then c opens it at them). Pick a command, and a request for it lands on the input line for you to finish and send.

This page covers candle 0.13.20, grouped as candle help groups its commands.

RuleWhat happens
readRuns at once, and the agent sees the output.
narrows accessIt only ever takes access away: revoking a key, taking a key off a wallet, untrusting a wallet. Typed by you (candle keys revoke … on the input line), it runs at once. Proposed by the agent, it’s a card you approve with one key press.
cardThe agent’s request becomes a card you approve with one key press. Then it runs with that agent’s key.
owner stepIt changes what your keys and wallets can do. It becomes a card (typed, it opens at once), and runs in a prompt pane the agent can’t see, where you give your vault factor and answer the CLI’s own prompts.
in the terminalIt needs the CLI’s own prompts: a passphrase, a recovery phrase, a typed confirmation. It runs in a terminal pane inside the Candle Harness that the agent can’t see, and the agent learns only whether it finished.
funds outIt moves funds out, signed from this machine’s vault, in the same prompt pane: the CLI asks for your vault passphrase and a typed confirm. The agent proposes one only when your own message names where it goes and how much. An address that looks like one of yours but isn’t is refused, and one that isn’t yours shows in amber, approved only by a click.
not in the Candle HarnessShell setup, or something the Candle Harness does itself.

now: the agent can do it today. coming: it’s on the way, and until then the agent says so.

Whatever the rule, the agent never sees a passphrase, a recovery phrase or a key. It can’t pass the flags that change who or where a command runs (--profile, --api-url), point a command at a file (except candle image upload, for a file in its own research folder), or chain a second command.

CommandWhat it doesRuleWhen
candle auth loginAuthorize this device and mint its API keyin the terminalnow (you complete it in the pane)
candle auth logoutClear local credentialsowner stepnow (the factor first)
candle auth statusShow credential statusreadnow
candle doctorDiagnose CLI setup: credentials, storage backend, API reachability, security key helperreadnow
candle setupOne wizard: authorize, fund, connect, verifyin the terminalnow (you complete it in the pane)
candle tuiCandle Harness: holdings, the feed, your agents and approval cards, in the terminalnot in the Candle HarnessThis is the Candle Harness.
CommandWhat it doesRuleWhen
candle stakeStake CNDL, start and finish withdrawals, claim Solana staking rewardsreadnow
candle stake addStake decimal CNDL in the selected walletcardnow
candle stake removeStart a withdrawal of decimal sCNDLcardnow
candle stake finishFinish a matured withdrawalcardnow
candle stake claimClaim one reward or all listed unclaimed rewards, including unresolved claimscardnow
candle swapQuote, confirm and swap on Solana or Hood, bridge between themcardnow
candle swap statusRead an operation without resending itreadnow
candle transferMove funds out of a TEE wallet to your own wallets or its vault, through its bound keyfunds outcoming: It needs a Withdraw key, and every agent key in the Candle Harness is Write, which can’t move funds. Send from a TEE wallet whose key is in this machine’s vault with candle vault transfer, or sweep a disabled one home with candle tee sweep.
candle launchCreate a token on Solana or Hood, with an optional first buycardnow; from the embedded wallet, and —check (reads); a TEE wallet: coming
candle launch statusOne state for a mint or a clientLaunchId: build, signed, confirmed, trading, bonded, migratedreadnow
candle image uploadUpload the file and print its URLcardnow
candle scanThe token card for one contract: market, all-time high, safety facts, tracked walletsreadnow
candle lp poolsPools listing a token: liquidity, fee, 24h volume, estimated yieldreadnow
candle lp positionsEvery position across your TEE walletsreadnow
candle lp addOpen a position, or add to onecardcoming: Candle hasn’t switched LP on for agent keys yet, and it needs a key with lp:write, which no preset has. candle-harness doctor says when Candle serves LP.
candle lp removeWithdrawcardcoming: Candle hasn’t switched LP on for agent keys yet, and it needs a key with lp:write, which no preset has. candle-harness doctor says when Candle serves LP.
candle lp claimClaim fees and any rewardscardcoming: Candle hasn’t switched LP on for agent keys yet, and it needs a key with lp:write, which no preset has. candle-harness doctor says when Candle serves LP.
candle perps marketsList live main-perp markets directly from Hyperliquidreadnow
candle perps marketMarket detail, margin tiers, impact prices and precision rulesreadnow
candle perps bookLive order book, spread and mid, directly from Hyperliquidreadnow
candle perps candlesOHLCV candles (default 1h, 100)readnow
candle perps ordersOpen orders on Hyperliquid, and every action Candle builtreadnow
candle perps positionsPositions, account value and withdrawable USDC, read live, and any withdrawal in flightreadnow
candle perps fillsOne page of the wallet’s fills, read directly from Hyperliquid (any read-capable key; no signer)readnow
candle perps fundingOne page of the wallet’s funding payments, signed (paid or received), read directly from Hyperliquidreadnow
candle perps accountAccount value, margin used, free margin, withdrawable, margin ratio, and realized P&L, fees and funding over a window (default 24h, at most 30 days)readnow
candle perps riskThe level now (ok, warn, critical) with what drives itreadnow
candle perps thresholdsShow this key’s risk thresholdsreadnow
candle perps thresholds setShow this key’s risk thresholdsowner stepcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps depositMove funds onto the Hyperliquid account through Relay, from the key’s Solana or Hood TEE wallet (swap:write)cardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps deposit statusMove funds onto the Hyperliquid account through Relay, from the key’s Solana or Hood TEE wallet (swap:write)readnow
candle perps withdrawMove USDC from the Hyperliquid account to this key’s own Solana or Hood TEE wallet through Relay (perps:withdraw)funds outcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps withdraw statusMove USDC from the Hyperliquid account to this key’s own Solana or Hood TEE wallet through Relay (perps:withdraw)readnow
candle perps setupAfter the first deposit has landed, approve Candle’s builder fee oncecardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps openMarket (IOC) without —price, limit with itcardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps closeReduce-only IOC close of all or part of a positioncardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps cancelCancel an order Candle built, by its cloidcardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps modifyChange a resting order Candle builtcardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps marginAdd isolated margin (positive only), or set the coin’s margin mode keeping its leverage unless —leverage names onecardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps tpslAttach, change or remove position take-profit / stop-loss legs, sized to the position nowcardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps schedule-cancelSet (at least 5 s ahead) or clear Hyperliquid’s cancel-all timercardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps flattenCancel every open main-perp order, then close every main-perp position, then read againcardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps leverageSet a market’s leverage and margin modecardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps reduce-onlyRead or set the key’s reduce-only restrictioncardcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps reduce-only onRead or set the key’s reduce-only restrictionnarrows accesscoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps reduce-only offRead or set the key’s reduce-only restrictionowner stepcoming: Perps trading comes in a later release. For now the Candle Harness reads perps markets, positions and risk, and doesn’t trade them.
candle perps watchPoll from this machine and print one JSON line per level change, heartbeat or errornot in the Candle HarnessThe core watches perps risk itself; —on-warn and —on-critical run commands.
CommandWhat it doesRuleWhen
candle lab statusPlan, admission, replay cap and usage, reset time and active jobreadnow
candle lab replaySubmit and wait for a replayreadnow
candle lab runnersMeasured runners in the windowreadnow
candle lab edgesSignal edges net of the cost already used by the tablereadnow
candle portfolioEvery wallet’s holdings, prices and value on Solana and Hood (vault read over your own RPCs)readnow
candle pnlP&L per chain and combined: realized, fees, unrealized and open positions (—profile for one key’s share)readnow
candle plansThe plans this API serves: prices, fees, limits and what each can doreadnow
candle plan buyBuy 30 daysowner stepnow (the CLI asks for the factor)
candle plan renewPay the next 30 days nowowner stepnow (the CLI asks for the factor)
candle plan statusPlan, period end, auto-renew, last x402 paymentreadnow
candle plan auto-renewRenew from 3 days before the period endsowner stepnow (the factor first)
candle plan auto-renew onRenew from 3 days before the period endsowner stepnow (the factor first)
candle plan auto-renew offRenew from 3 days before the period endsnarrows accessnow
candle feesCreator fees your launched tokens can pay, and the claimreadnow
candle fees claimClaim one token’s creator feescardnow
candle agent profileRead the displayed profile or edit allowed fieldsreadnow
candle agent profile showRead the displayed profile or edit allowed fieldsreadnow
candle agent profile setRead the displayed profile or edit allowed fieldscardnow
candle agent positionsA published agent’s open positions, spot and Hyperliquid perps, with amountsreadnow
candle agent postPublish or delete a post on this agent’s pagereadnow
candle agent post listPublish or delete a post on this agent’s pagereadnow
candle agent post createPublish or delete a post on this agent’s pagecardnow
candle agent post deletePublish or delete a post on this agent’s pagecardnow
candle keys listList live API keys: name and Read, Write or Withdraw accessreadnow
candle keys limitSet or clear the USD transaction cap on an existing key, with the device tokenowner stepnow (the factor first)
candle keys createCreate an API keyowner stepnow (the factor first)
candle keys accessChange an existing key’s level in place (same key, wallets and caps)owner stepnow (the factor first); —access read (narrows) and —history (reads): now
candle keys updateAllow or deny a key the account’s embedded wallet, with the device tokenowner stepnow (the factor first); —embedded-wallet deny (narrows): now
candle keys selfThe profile’s own key gives up the embedded wallet, with no promptnarrows accessnow
candle keys self embedded-walletThe profile’s own key gives up the embedded wallet, with no promptnarrows accessnow
candle keys revokeRevoke an API key permanentlynarrows accessnow
candle keys limitsSet a key’s per-asset caps (sol, usdc, cndl, eth, usdg; a whole number of base units per transaction) with the profile’s own API keynarrows accessnow
candle keys stopPause one key with the device tokennarrows accessnow
candle keys resumeResume a stopped key with the device tokenowner stepnow (the factor first)
candle keys rotateGive a key a new secret, keeping its prefix, label, access, limits, wallets and historyowner stepcoming: Rotating gives the key a new secret, and the Candle Harness holds its own copy of each agent’s key, which stops working when the old secret does. The Candle Harness doesn’t store a rotated secret yet: for an agent’s key, make a fresh one with candle keys create and revoke the old one once the agent runs on it.
candle keys walletsWallets an agent profile can usereadnow
candle keys wallets setReplace the profile’s wallet setnarrows accessnow
candle keys wallets scopeLimit a profile to assigned walletsnot in the Candle HarnessWidening a key to every wallet is refused from a key: widen it in Candle’s agent console. Narrowing it to selected wallets runs now.
candle keys signerApprove (or reject) a key’s signer request with the device tokenowner stepnow (the factor first)
candle keys signer approveApprove (or reject) a key’s signer request with the device tokenowner stepnow (the factor first)
candle keys signer moveOn the machine holding a wallet’s current signer: move every wallet on the key onto its active signer (legacy per-wallet ones too)owner stepnow (the factor first)
candle walletsLaunch and linked walletsreadnow
candle wallets importImport a wallet you own (key via —key-file or hidden prompt)in the terminalnow (you complete it in the pane)
candle wallets revokeRevoke a linked walletnarrows accessnow
candle wallets trustMark linked wallets yours, so agents can move funds into them (owner only; typed confirm)owner stepnow (the factor first)
candle wallets untrustClear the marknarrows accessnow
candle wallets allow-launchDeprecated: a key’s launch:write decides TEE launches where the server has TEE_LAUNCH_BY_SCOPE_ENABLED onowner stepnow (the factor first)
candle wallets disallow-launchDeprecated: where the server has TEE_LAUNCH_BY_SCOPE_ENABLED on it saves the value but cannot stop a launch, and exits 1 with the server’s messagenarrows accessnow
candle wallets allowlistThe account’s withdrawal allowlist (the destinations candle transfer —to readnow
candle wallets authorizeGive agents access to the account’s embedded wallets: opens the Agents page’s grant step in your browser (no key is created) and, with an API key, waits until it landsin the terminalnow (you complete it in the pane)
candle wallets close-emptyClose a wallet’s empty token accounts and return their rent to it, after a preview: the embedded wallet (transfer:write), or a TEE wallet bound to this key, signed by its key signer (swap:write)cardnow; from a TEE wallet; the embedded wallet’s needs transfer:write, which an agent key doesn’t have
candle token forensicsToken forensicsreadnow
candle token vamp-candidatesTokens near graduation whose ticker others copyreadnow
candle token eventsSignals, callouts and tracked-wallet trades for one token, one per linereadnow
candle token clustersRead cluster analysis, or its unavailable reasonreadnow
candle token aboutThe token’s About page: claim, sections and measured supplyreadnow
candle token historyThe token’s metadata edits, newest firstreadnow
candle token commentsThe token’s comments, newest first, with tombstonesreadnow
candle token editAs the token’s creator, set or —clear its description and links (not name, symbol or image)cardnow
candle token claimJoin the page’s editors as a holder, or as its creator with —creator (a signed message)cardcoming: It writes to a token’s public page as the key’s account, which needs token-pages:write. No preset has it, so no agent key in the Candle Harness does. Run it in your own terminal with a key made for it.
candle token sectionWrite a section from —file, or restore an earlier —version-id, at —base-revisioncardcoming: It writes to a token’s public page as the key’s account, which needs token-pages:write. No preset has it, so no agent key in the Candle Harness does. Run it in your own terminal with a key made for it.
candle token flagReport one exact version, update or comment to Candle’s review queuecardcoming: It writes to a token’s public page as the key’s account, which needs token-pages:write. No preset has it, so no agent key in the Candle Harness does. Run it in your own terminal with a key made for it.
candle token updatePost an immutable holder update from —file (1000 characters)cardcoming: It writes to a token’s public page as the key’s account, which needs token-pages:write. No preset has it, so no agent key in the Candle Harness does. Run it in your own terminal with a key made for it.
candle token commentPost an immutable comment from —file (500 characters)cardcoming: It writes to a token’s public page as the key’s account, which needs token-pages:write. No preset has it, so no agent key in the Candle Harness does. Run it in your own terminal with a key made for it.
candle token postDelete your own update or comment, including after sellingcardcoming: It writes to a token’s public page as the key’s account, which needs token-pages:write. No preset has it, so no agent key in the Candle Harness does. Run it in your own terminal with a key made for it.
candle token post deleteDelete your own update or comment, including after sellingcardcoming: It writes to a token’s public page as the key’s account, which needs token-pages:write. No preset has it, so no agent key in the Candle Harness does. Run it in your own terminal with a key made for it.
candle spendx402 per-use payments: the local log, the daily limit, the per-call ceiling, pausenot in the Candle HarnessThe CLI’s own log and limits for x402 per-use payments, which the Candle Harness never makes: token forensics and the vamp finder go through Candle’s MCP tools, which don’t pay. Run it in your own terminal.
candle spend limitShow or set the daily per-use limit (default $5)not in the Candle HarnessThe CLI’s own log and limits for x402 per-use payments, which the Candle Harness never makes: token forensics and the vamp finder go through Candle’s MCP tools, which don’t pay. Run it in your own terminal.
candle spend max-per-callShow or set the per-call ceiling (default $1)not in the Candle HarnessThe CLI’s own log and limits for x402 per-use payments, which the Candle Harness never makes: token forensics and the vamp finder go through Candle’s MCP tools, which don’t pay. Run it in your own terminal.
candle spend pauseStop every per-use payment until resumednot in the Candle HarnessThe CLI’s own log and limits for x402 per-use payments, which the Candle Harness never makes: token forensics and the vamp finder go through Candle’s MCP tools, which don’t pay. Run it in your own terminal.
candle spend resumeAllow per-use payments againnot in the Candle HarnessThe CLI’s own log and limits for x402 per-use payments, which the Candle Harness never makes: token forensics and the vamp finder go through Candle’s MCP tools, which don’t pay. Run it in your own terminal.
candle quant askAsk Quant one question and print the answerreadnow
candle quant termsShow Quant’s terms and record acceptancein the terminalnow (you complete it in the pane)
candle profile listProfiles on this machine, with cached accounts, and each one’s Solana RPC hostreadnow
candle profile addCreate a profile before authenticating itowner stepnow (the factor first)
candle profile useMake a profile the active oneowner stepnow (the factor first)
candle profile renameRename a profileowner stepnow (the factor first)
candle profile removeDelete a profile and its stored credentialsowner stepnow (the factor first)
candle profile setThis profile’s Solana RPC, used when —rpc-url and CANDLE_SOLANA_RPC_URL are not givenowner stepnow (the factor first)
CommandWhat it doesRuleWhen
candle vault initCreate the vault: one passphrase factor and an HD rootin the terminalnow (you complete it in the pane)
candle vault statusWhat the vault holds, and what opens itreadnow; —unlock (in the terminal): now
candle vault listOne line per key: address, label, role, TEE lifecycle, derivationowner stepnow (the CLI asks for the factor)
candle vault new-keyDerive the next Solana key (m/44’/501’/n’/0’) or EVM key (m/44’/60’/n’/0/0), or n of them under one unlockowner stepnow (the CLI asks for the factor)
candle vault renameRename one vault or external key, or a retired TEE walletowner stepnow (the CLI asks for the factor)
candle vault phraseShow the 24-word recovery phrase (terminal only)in the terminalnow (you complete it in the pane)
candle vault restoreRebuild a vault from the recovery phrasein the terminalnow (you complete it in the pane)
candle vault reconcile-exposureRe-read this account and add exposureowner stepnow (the CLI asks for the factor)
candle vault factorManage the factors that open the vaultin the terminalnow (you complete it in the pane)
candle vault factor listManage the factors that open the vaultreadnow
candle vault factor addManage the factors that open the vaultin the terminalnow (you complete it in the pane)
candle vault factor removeManage the factors that open the vaultowner stepnow (the CLI asks for the factor)
candle vault enrollSame as factor addin the terminalnow (you complete it in the pane)
candle vault backupCopy the vault and verify the copy in fullowner stepnow (the CLI asks for the factor)
candle vault verify-backupVerify a copy in full (all eight steps; a ninth for a vault with Hood TEE wallets: every line of the record beside the copy decrypts under the copy’s key)owner stepnow (the CLI asks for the factor)
candle vault import-legacyMigrate tee-wallets.enc into the vaultowner stepnow (the CLI asks for the factor)
candle vault retire-legacyRename the Phase 1 store after a verified backupowner stepnow (the CLI asks for the factor)
candle vault transferSign a transfer locally from a vault key or a promoted TEE wallet (Solana, or Hood: refused while a sequenced trade holds the wallet’s nonce, and when that cannot be read)funds outnow
candle vault promoteFresh TEE key, or promote one vault key in placeowner stepnow (the CLI asks for the factor)
candle vault promote-batchPromote many vault keys in place: one unlock, one reviewed acknowledgementowner stepnow (the CLI asks for the factor)
candle vault fundFund a TEE or external wallet from a vault keyowner stepnow (the CLI asks for the factor)
candle vault demoteDisable then sweep a TEE wallet back to its pinowner stepnow (the CLI asks for the factor)
candle vault export-keyExport one key as plaintext (interactive ceremony: unlock, then type confirm under the address)in the terminalnow (you complete it in the pane)
candle tee newAdd a Solana key to an existing tee-wallets.encowner stepnow (you complete it in the pane)
candle tee enableDelegate a TEE wallet keyowner stepnow (the CLI asks for the factor)
candle tee fundPrint the funding instruction for your vault to signreadnow (the CLI asks for the factor)
candle tee statusServer lifecycle state and on-chain balances without unlockingreadnow; —verify (an owner step, in the prompt pane): now
candle tee checkCheck payable membership, record parity and this machine’s signer without spendingreadnow
candle tee disableStop the agentnarrows accessnow (the CLI asks for the factor)
candle tee sweepSign locally and move everything to the pinned vaultfunds outnow
candle tee rebindMove TEE wallets to another key on this account, which is how a key gets TEE walletsowner stepnow (the factor first)
candle tee rebindsList TEE wallet rebinds for this account (owner only)readnow
candle tee renameRename one TEE wallet: the label Candle holds and, when its key is in this vault, the vault entry (owner only)owner stepnow (the factor first)
candle tee signerOn the trading machine, with that key’s API key: generate the key’s signer here and wait for the owner to approve itowner stepnow (the factor first)
candle tee signer newOn the trading machine, with that key’s API key: generate the key’s signer here and wait for the owner to approve itowner stepnow (the factor first)
candle tee signer removeRemove this machine’s key signer once it owns no wallets, and tell the server it is goneowner stepnow (the factor first)
candle tee signer statusRead the server signer state once without generating a pair or requesting approvalreadnow
candle external newDerive an external wallet for outside tools (never delegated, never registered)owner stepnow (the CLI asks for the factor)
candle external listThe external wallets in the vaultowner stepnow (the CLI asks for the factor)
candle external sweepSend everything an external wallet holds back to a vault keyfunds outnow
candle signSign a transaction or a message with an external walletin the terminalnow (you complete it in the pane)
candle sign messageSign an off-chain message (the exact bytes of the file or stdin)in the terminalnow (you complete it in the pane)
CommandWhat it doesRuleWhen
candle secrets setStore one of your own third-party API keys (hidden prompt, never sent to Candle)in the terminalnow (you complete it in the pane)
candle secrets listThe names of your stored secretsreadnow
candle secrets removeDelete a stored secretnarrows accessnow
candle pluginsThe candle- executables on your PATHreadnow
CommandWhat it doesRuleWhen
candle verifyVerify a release asset’s Sigstore bundlein the terminalnow (you complete it in the pane)
candle updateUpdate the CLI and its security key helper to the latest signed releasein the terminalnow (you complete it in the pane)
candle helpThis screen, or a command’s own: candle help vaultreadnow
candle mcpRun the Candle MCP server with stored credentialsnot in the Candle HarnessThe core runs Candle’s MCP server itself.
candle core serveStart the core for the profile in playnot in the Candle HarnessThe Candle Harness runs its own core: candle-harness core.
candle core mcpA stdio MCP server for any harness, attached to the running core: money writes become cardsnot in the Candle HarnessThe Candle Harness has its own MCP server for agents: candle-harness mcp.
candle completionShell completions for zsh, bash or fishnot in the Candle HarnessShell setup, not a Candle Harness feature.
candle completion zshcandle completion zsh > ”${fpath[1]}/_candle”not in the Candle HarnessShell setup, not a Candle Harness feature.
candle completion bashcandle completion bash > ~/.local/share/bash-completion/completions/candlenot in the Candle HarnessShell setup, not a Candle Harness feature.
candle completion fishcandle completion fish > ~/.config/fish/completions/candle.fishnot in the Candle HarnessShell setup, not a Candle Harness feature.