
Security News
PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems
PolinRider expands across npm, Packagist, Go modules, and Chrome extensions, using hidden loaders to target developer environments.
@2oolkit/grvt-cli
Advanced tools
Command-line toolkit for the GRVT derivatives exchange. Trade perpetuals, manage orders, and query market data — all from your terminal.
npm install -g @2oolkit/grvt-cli
Verify the installation:
grvt-cli --version
grvt-cli config init
You will be prompted for:
| Prompt | Description | Where to find it |
|---|---|---|
| API Key | Your GRVT API key | Dashboard > Settings > API Keys |
| API Secret | Private key associated with your API key | Shown once when you create the API key |
| Sub-account ID | Numeric sub-account ID for trading | Dashboard > Sub-accounts |
The wizard saves your config to ~/.grvt-cli/config.json (file permissions 0600) and automatically logs you in.
grvt-cli auth status
# Check BTC price
grvt-cli market ticker BTC_USDT_Perp
# Place a limit buy order
grvt-cli order create --instrument BTC_USDT_Perp --side buy --size 0.001 --price 60000
# View open orders
grvt-cli order list
grvt-cli config init
grvt-cli config set --api-key <key> --api-secret <secret> --sub-account-id <id>
grvt-cli auth login
grvt-cli config set --api-key <new-key>
You can also configure via environment variables. These are used as fallback when a config file value is not set.
export GRVT_API_KEY=<your-api-key>
export GRVT_SECRET_KEY=<your-api-secret>
export GRVT_SUB_ACCOUNT_ID=<your-sub-account-id>
grvt-cli config list
Secrets are automatically masked in the output.
grvt-cli auth login # Login and create a session
grvt-cli auth status # Check session status
grvt-cli auth logout # Clear saved session
# List instruments
grvt-cli market instruments
grvt-cli market instruments --kind PERPETUAL
grvt-cli market instruments --base BTC
# Ticker
grvt-cli market ticker BTC_USDT_Perp
# Orderbook
grvt-cli market orderbook BTC_USDT_Perp
grvt-cli market orderbook BTC_USDT_Perp --depth 20
# Create orders
grvt-cli order create --instrument BTC_USDT_Perp --side buy --size 0.001 --price 60000
grvt-cli order create --instrument BTC_USDT_Perp --side sell --size 0.001 --type market
grvt-cli order create --instrument ETH_USDT_Perp --side buy --size 0.1 --price 3000 --post-only
# Cancel orders
grvt-cli order cancel --order-id <id>
grvt-cli order cancel-all
grvt-cli order cancel-all --kind PERPETUAL
# Query orders
grvt-cli order get --order-id <id>
grvt-cli order list
grvt-cli order history --limit 50
| Option | Description | Default |
|---|---|---|
--instrument | Instrument name (e.g., BTC_USDT_Perp) | required |
--side | buy or sell | required |
--size | Order size | required |
--type | limit or market | limit |
--price | Limit price (required for limit orders) | — |
--post-only | Maker-only order | false |
--reduce-only | Reduce-only order | false |
--time-in-force | GOOD_TILL_TIME, IMMEDIATE_OR_CANCEL, FILL_OR_KILL | GOOD_TILL_TIME |
--client-order-id | Custom client order ID | auto-generated |
grvt-cli position list
grvt-cli position list --kind PERPETUAL
grvt-cli position list --instrument BTC_USDT_Perp
grvt-cli account summary # Funding account summary
grvt-cli account sub-account # Sub-account summary (balances, margin)
grvt-cli funding rate BTC_USDT_Perp # Current funding rate
grvt-cli funding history --limit 10 # Funding payment history
All commands support -o json for JSON output, which is useful for scripting and piping:
# Table output (default)
grvt-cli market ticker BTC_USDT_Perp
# JSON output
grvt-cli market ticker BTC_USDT_Perp -o json
# Pipe to jq
grvt-cli order list -o json | jq '.[].order_id'
| File | Path | Description |
|---|---|---|
| Config | ~/.grvt-cli/config.json | API key, secret, sub-account ID |
| Session | ~/.grvt-cli/session.json | Login session cookie (auto-managed) |
Both files are created with 0600 permissions (owner read/write only).
MIT
FAQs
CLI & MCP server for GRVT derivatives exchange — trade perpetuals, manage orders, and query market data
The npm package @2oolkit/grvt-cli receives a total of 45 weekly downloads. As such, @2oolkit/grvt-cli popularity was classified as not popular.
We found that @2oolkit/grvt-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
PolinRider expands across npm, Packagist, Go modules, and Chrome extensions, using hidden loaders to target developer environments.

Security News
Open source attacks are accelerating as AI coding agents pull in dependencies faster, with less human review.

Research
/Security News
Malicious Chrome and Firefox extensions posed as free VPNs while stealing clipboard data through later extension updates.