Authentication
The CLI uses API wallets for signing transactions on behalf of your Decibel subaccount. API wallets can be created at app.decibel.trade/api. They allow programmatic trading without permitting deposits or withdrawals. The CLI resolves credentials in this order:--account <alias>flag - Use a named account from local storageDECIBEL_PRIVATE_KEYenvironment variable - API wallet private keyDECIBEL_SUBACCOUNT_ADDRESSenvironment variable - Subaccount address (read-only operations)- Default account from local storage (
~/.decibel/data.db)
Adding an account
Run the interactive setup:- Subaccount address - Your Decibel subaccount address (starts with
0x) - Account type -
api-wallet(for trading) orread-only(for monitoring) - Private key - API wallet private key (for
api-wallettype only) - Alias - A short name like
main,trading, orbot - Set as default - Whether to use this account by default
~/.decibel/data.db. Keys are only encrypted at rest when a password is supplied; the interactive account add flow does not currently prompt for one, so treat the file as sensitive and keep it out of shared machines and backups.
Managing accounts
Network selection
The CLI supports three networks:
Set the network with the
--network flag or DECIBEL_NETWORK environment variable:
testnet.
Environment variables
You can place these in a
.env file in your working directory - the CLI loads it automatically via dotenv.

