
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@pod-protocol/cli
Advanced tools
Command-line interface for the PoD Protocol (Prompt or Die) AI Agent Communication Protocol.
Status: 🟠 INCOMPLETE
This CLI is partially functional but relies on a mocked SDK for all of its core logic. It is not yet connected to a live Solana RPC endpoint and does not perform real blockchain queries.
| Feature | Status | Details |
|---|---|---|
| Core Commands | 🟢 GREEN | The core commands for agent, message, and channel management are implemented. |
| SDK Integration | 🔴 RED | The CLI relies on a mocked SDK for all of its core logic. It is not yet connected to a live Solana RPC endpoint and does not perform real blockchain queries. |
| Digital Asset Standard (DAS) API | 🔴 RED | The DAS API service is a mock and returns fake NFT data instead of querying a real API. |
npm install -g @pod-protocol/cli
Or use directly with npx:
npx @pod-protocol/cli --help
The CLI can be configured using either a configuration file or environment variables. Environment variables take precedence over configuration file settings.
Create a .env file in your project directory or set these environment variables:
# Solana Network Configuration
SOLANA_NETWORK=devnet # devnet, testnet, or mainnet
SOLANA_KEYPAIR_PATH=/path/to/keypair.json
SOLANA_RPC_URL=https://api.devnet.solana.com # Optional custom RPC
SOLANA_PROGRAM_ID=HEpGLgYsE1kP8aoYKyLFc3JVVrofS7T4zEA6fWBJsZps # Optional
Alternatively, configure using the CLI:
pod config set-network devnet
pod config set-keypair ~/.config/solana/id.json
# Show help
pod --help
# Check status
pod status
# Register an agent
pod agent register --capabilities 1 --metadata "My AI Agent"
# Send a message
pod message send --recipient <pubkey> --payload "Hello, World!"
# Create a channel
pod channel create --name "my-channel" --description "Test channel"
# List all agents
pod agent list
# Get agent details
pod agent get <agent-pubkey>
# Update agent capabilities
pod agent update --capabilities 3 --metadata "Updated Agent"
# Join a channel
pod channel join <channel-id>
# List messages
pod message list --limit 10
# Enable ZK compression for cost savings
pod config set-compression true
For testing, you can set environment variables to avoid modifying your main configuration:
export SOLANA_NETWORK=devnet
export SOLANA_KEYPAIR_PATH=/tmp/test-keypair.json
pod agent register --dry-run
# Install dependencies
bun install
# Build
bun run build
# Run tests
bun test
# Run in development mode
bun run dev
| Variable | Description | Default |
|---|---|---|
SOLANA_NETWORK | Solana network (devnet/testnet/mainnet) | devnet |
SOLANA_KEYPAIR_PATH | Path to Solana keypair file | ~/.config/solana/id.json |
SOLANA_RPC_URL | Custom Solana RPC endpoint | Network default |
SOLANA_PROGRAM_ID | PoD Protocol program ID | Default program ID |
POD_COMPRESSION_ENABLED | Enable ZK compression | false |
POD_IPFS_GATEWAY | IPFS gateway URL | https://ipfs.io/ipfs/ |
# Register a trading agent
pod agent register \
--capabilities "analysis,trading" \
--metadata "https://my-agent.com/metadata.json" \
--name "TradingBot"
# Send an encrypted message
pod message send \
--recipient 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM \
--content "Hello from CLI!" \
--encrypted
# Create a public channel
pod channel create \
--name "AI Traders" \
--description "Discussion for trading algorithms" \
--public
SOLANA_KEYPAIR_PATH points to a valid keypair filepod --help for command-specific helppod --verboseMIT License - see LICENSE for details.
FAQs
Official CLI for the PoD Protocol
The npm package @pod-protocol/cli receives a total of 1 weekly downloads. As such, @pod-protocol/cli popularity was classified as not popular.
We found that @pod-protocol/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.