Facts first: 59 toplevel commands exist. Here's my ranking of the 20 most significant — it's a judgment call, not a spec
Facts first: 59 top-level commands exist. Here's my ranking of the 20 most significant — it's a judgment call, not a spec. Custody and permissions (the core)
- bsv create / import / unlock / lock — 12-word HD wallet, seed in the OS keyring (Keychain on macOS, libsecret on Linux), locked by default with a 15-minute auto-lock. Phrase entry is hidden-prompt only; a browser never sees it.
- bsv allow / deny / requests / policies — the policy engine. Per-origin caps, an explicit deny list, and the denial-then-approval loop: an unknown origin's first spend is refused and queued, never silently allowed.
- bsv agent mint (list/show/revoke) — capped sub-wallets with lifetime budget, daily limit and expiry. This is what makes an agent safe to leave running.
- bsv status / balance / utxos / address — the basics, all readable while locked. Spending is what the lock gates. Money movement
- bsv send / pay — exact-amount send, and pay-by-name (@alice, identity key, or address) with an encrypted note in one step.
- bsv sweep out / sweep in — drain a wallet to an address (amount = balance − fee), or pull a WIF's funds in. Sweep-in always pays this wallet, so a pasted key can't be redirected.
- bsv request — signed asks for money as shareable bsvpay1: codes (pay/decline/import/code).
- bsv receipt issue — a signed proof of payment inscribed as a 1Sat ordinal, delivered in the inscription tx. Machine economy
- bsv x402 pay / x402 serve / price / sales / receipts / attest — metered machine payments in both directions: buy paid APIs with a quote→pay→receipt loop, or sell this wallet's own answers (Jev decisions, memory recall) over x402.
- bsv mcp --agent= — 44 tools over stdio for any MCP client. Every call is stamped with the agent name, so policy and the custody lock apply per-agent.
- bsv stream start / beat / ticks — pay-per-minute sats for agent work, heartbeat-gated so payment stops when the work does.
- bsv capsule lock — post-dated cheques: reserved funding that auto-pays a recipient at maturity (CLTV is dead on BSV, so this is a ticker, not a script).
- bsv commitments — every timed obligation (streams, cast sessions, capsules) in one view with total exposure and next due.
- bsv funds attest / prove / verify — prove "I hold ≥ N sats" bound to a Merkle root over the UTXO set, with expiry and real selective disclosure — no balance, no UTXO list. Identity and comms
- bsv msg send / sync / show / ack plus bsv p2p peers — encrypted DMs, direct to a live peer on your network or via relay otherwise.
- bsv memory remember / recall / forget — agent memory on a shared encrypted board, optionally published to the public bsvos.memory group over x402 (~20 sats).
- bsv board — signed, encrypted agent-to-agent boards (post/get/reply/wait/subscribe), p2p-first.
- bsv cert put / show / revoke — hold signed certificates and disclose selected fields with an audit trail. Assets and apps
- bsv ord + inscribing, and bsv bsv21 — 1Sat ordinals (list/send, and mint any file up to 256 KiB) and fungible token positions.
- bsv app install / open / store — the Metanet app registry: manifest-pinned installs, permission widening requires explicit approval, and apps open in a sandboxed window with a capability-scoped window.bsv. Beyond the twenty Also present and non-trivial: watch (one filtered event tail), history (unified ledger), jev (calibrated decisions), nightshift (standing orders with per-cycle escrow), gig (bounty board), twetch (feed/post/market), cast (value-for-value streaming with guest splits), evolve (prompt evolution market), torrent (trackerless BitTorrent), recovery (Shamir guardian cards), basket, overlay, sign, share/anchor, faucet, login/whoami, doctor. Two context notes: the newest of these came from different machines — watch/commitments/funds from the Linux agent, sweep and the inscribe/Twetch/shell work from this Mac. And 34 of them are also exposed as UI views in the bsvOS shell app; the Quickshell panel deliberately covers only the wallet-critical subset.