kalvex CLI

Smart contract security auditing from the terminal.

Installation

npm install -g kalvex

Or run without installing:

npx kalvex audit MyToken.sol

Setup

Save your API key once:

kalvex auth YOUR_API_KEY

Or set the environment variable:

export KALVEX_API_KEY=YOUR_API_KEY

Commands

kalvex audit <file>

Audit a Solidity contract file.

kalvex audit contracts/MyToken.sol
kalvex audit contracts/Vault.sol --name Vault --report
kalvex audit contracts/DEX.sol --json > results.json

Options:

| Flag | Description | |------|-------------| | -n, --name <name> | Contract name (default: Contract) | | --report | Generate a shareable report URL | | --json | Output raw JSON result |

Example output:

✔ Audit complete

Contract:  Vault
Verdict:   DO NOT DEPLOY
Risk:      8.5 / 10.0 (CRITICAL)
Findings:  4

  ● 2 CRITICAL
  ● 1 HIGH
  ● 1 MEDIUM

Findings

1. [CRITICAL]  Reentrancy Vulnerability
   External call before state update in withdraw() — attacker can drain all ETH
   💸 $60M–$197M
   CWE-841  CVSS: 9.8

Report: https://kalvex.io/report/abc123xyz

kalvex status

Check API health and your account tier.

kalvex status

kalvex auth <api-key>

Save your API key locally (~/.kalvex/config.json).

kalvex auth kx-live-xxxxxxxxxxxxxxxxxxxx

Use --url to point at a self-hosted instance:

kalvex auth MY_KEY --url http://localhost:8080

Environment Variables

| Variable | Description | |----------|-------------| | KALVEX_API_KEY | API key (overrides saved config) | | KALVEX_API_URL | API base URL (overrides saved config) |

License

MIT