CLI reference

The network whose chain and keys the command uses.

Accepted by every command. Default: devnet. Environment: MINA_NETWORK.

• devnet
• mainnet

A peer to connect to at startup, as a multiaddr. Repeat it for more peers.

The format is /ip4/<address>/tcp/<port>/p2p/<peer id>, with /ip6/ or /dns4/ in place of /ip4/ for other addresses. Peers given here, or by --peer-list-file or --peer-list-url, replace the network's default peers.

Alias: --peer.

A file of peers to connect to at startup, one multiaddr per line.

Empty lines are skipped. Lines that don't parse are logged and skipped.

Environment: MINA_PEER_LIST_FILE.

A URL that returns peers to connect to at startup, in the --peer-list-file format.

Environment: MINA_PEER_LIST_URL.

Run as a seed node: without peers given, the node waits for peers to connect instead of dialling the network's default peers.

Environment: MINA_SEED.

The most peer connections the node keeps.

Default: 100.

The TCP port for libp2p peer connections.

Alias: --external-port. Default: 8302. Environment: MINA_LIBP2P_PORT.

A public IP address at which peers may reach this node. Repeat it for more addresses.

An encrypted libp2p key file, as OCaml's mina libp2p generate-keypair writes it, for the node's peer identity.

The password is read from the MINA_LIBP2P_PASS environment variable. The file takes precedence over --p2p-secret-key.

The node's libp2p secret key, for its peer identity.

By default the node reads p2p-secret-key in the work directory, and creates it on the first start.

Environment: MINA_P2P_SEC_KEY.

The TCP port of the HTTP server: the dashboard, the API and GraphQL.

Default: 3000. Environment: MINA_PORT.

The address the HTTP server listens on. 0.0.0.0 listens on all IPv4 interfaces.

Default: 127.0.0.1. Environment: MINA_HTTP_ADDR.

A page origin, like https://dash.example.org, whose pages may read this node's HTTP API besides pages of this machine.

Pages of this machine are localhost, 127.0.0.1 and [::1] on any port. Repeat the option, or give a comma-separated list in the environment; * lets every page read the API. Opening the node's pages at a host name rather than an IP address or localhost also needs that name listed, as http://name:port.

Environment: MINA_HTTP_CORS_ORIGINS.

Accept transactions over HTTP: POST /send-payment and the GraphQL mutations sendPayment, sendDelegation and sendZkapp.

Off by default, so that a public node does not take submissions from anyone who can reach its port. When off, they get HTTP 403 or a GraphQL error. Turn it on only for a node whose HTTP port only you can reach.

Environment: MINA_ENABLE_TX_SUBMISSION.

Answer only a read-only GraphQL subset, for a node whose HTTP port anyone can reach.

The subset takes one query per request (no mutations, batches or introspection), with the fields block explorers, o1js and wallets read, bestChain with maxLength up to 20, and a cost ceiling. It leaves out the peers, SNARK pool, operator and telemetry fields. Refused requests get HTTP 400 before any work is done. The dashboard and GraphiQL are not served.

Environment: MINA_PUBLIC_GRAPHQL.

Serve whole-ledger exports over HTTP, for mina ledger export and mina fork export. Off by default: an export is expensive, so restrict access to the HTTP port first.

Environment: MINA_ENABLE_LEDGER_EXPORT.

Don't serve the dashboard at /. The API routes keep their paths.

Environment: MINA_NO_DASHBOARD.

Serve Prometheus metrics on this separate TCP port. Off by default.

Environment: MINA_METRICS_PORT.

The address the metrics listener listens on.

Default: 127.0.0.1. Environment: MINA_METRICS_ADDR.

The work directory: the node's chain state, caches, logs and settings.

Default: ~/.mina. Environment: MINA_HOME.

Don't keep a frontier store. The node keeps one by default, from which a restart resumes instead of syncing from the start.

The store holds the best chain's blocks as they come, and a checkpoint of the root's ledgers and staged ledger every --checkpoint-interval seconds. A restart restores from it when it passes its checks and isn't too old; otherwise the node bootstraps and logs why.

Environment: MINA_NO_FRONTIER_STORE.

Write the frontier store, but don't restore from it at startup.

The directory for frontier stores, one per chain, at <DIR>/<chain id>/frontier. Defaults to the work directory.

Environment: MINA_FRONTIER_STORE_DIR.

Delete the frontier store when the node opens it, so that the node bootstraps.

Seconds a frontier store restore may go without progress before the node gives it up and bootstraps (1 to 300).

Default: 60.

Seconds between checkpoints of the frontier store's root.

Default: 1800. Environment: MINA_CHECKPOINT_INTERVAL.

Keep retained proofs in memory rather than in files under <work dir>/proof-cache. Takes precedence over --proof-cache.

Proofs go to the files by default, except on a block producer (--producer-key), which keeps the proofs it may read to build and prove a block in memory unless --proof-cache is given.

Environment: MINA_NO_PROOF_CACHE.

Keep retained proofs in files under <work dir>/proof-cache on a block producer too. A failed read can then cost it a block.

Keep the staking, next epoch and root snarked ledgers' accounts in memory rather than in files under <work dir>/ledger-accounts

Environment: MINA_NO_LEDGER_DISK.

Keep the root snarked ledger's accounts in memory, while the epoch ledgers' go to files. No effect with --no-ledger-disk

Environment: MINA_NO_ROOT_LEDGER_DISK.

Produce blocks with the account key in this encrypted key file.

The password is read from the MINA_PRIVKEY_PASS environment variable; unset means an empty password.

Alias: --block-producer-key. Environment: MINA_PRODUCER_KEY.

The public key that receives the coinbase of the blocks this node produces. Defaults to the producer's own key.

If the key is a zkApp account's, its receive permission must be None.

The least milliseconds after the start of its slot before the node publishes a block it produced (at least 1000).

Default: 1000.

Run the SNARK worker, with fees paid to this public key (B62...).

As with OCaml's --run-snark-worker, the worker needs no private key: the public key only goes into the message its proofs commit to. If the key is a zkApp account's, its receive permission must be None, or OCaml nodes reject the work.

Alias: --run-snark-worker. Environment: MINA_RUN_SNARKER.

The fee asked for each SNARK work bundle, in MINA (for example 0.1), as OCaml's --snark-worker-fee.

If the worker's key has no account yet, OCaml nodes only accept work whose fee is at least the account creation fee (1 MINA).

Alias: --snark-worker-fee. Default: 0.1. Environment: MINA_SNARKER_FEE.

How the SNARK worker picks its next job: rand picks any of the jobs it may take at random, as OCaml's default --work-selection, and seq the first in scan-state order.

It applies to a worker started with --run-snarker, from the dashboard, or from the setting the dashboard saved.

Default: rand. Environment: MINA_SNARKER_STRATEGY.

Seconds before a won slot in which a node that also produces blocks starts no new SNARK job (0 to 4200; 0 turns it off). No effect without --producer-key

Default: 420. Environment: MINA_SNARKER_BLOCK_FIRST_LEAD.

Let the dashboard start, stop and re-price the SNARK worker (POST /snarker/control). Off by default.

The worker's settings decide where fees go, so allow this only on a node whose HTTP port only you can reach. It can't be combined with --public-graphql. A worker started from the dashboard is saved in <work dir>/snark-worker.json and comes back after a restart, with or without this option; --run-snarker takes precedence over it. Stopping the worker from the dashboard deletes the file, as does deleting it while the node is stopped.

Environment: MINA_ALLOW_WORKER_CONTROL.

A page origin, like https://dash.example.org, that may change the SNARK worker besides pages of this machine.

Pages of this machine are localhost, 127.0.0.1 and [::1] on any port. Repeat the option, or give a comma-separated list in the environment. Requests from any other page are refused.

Environment: MINA_WORKER_CONTROL_ORIGINS.

Serve WebRTC signaling for browser peers on this separate TCP port. Off by default.

Environment: MINA_WEBRTC_SIGNAL_PORT.

The address the signaling listener listens on. Pages served over HTTPS need a TLS proxy in front of it.

Default: 127.0.0.1. Environment: MINA_WEBRTC_SIGNAL_ADDR.

A JSON file of ICE servers for WebRTC connections, in the browser's RTCIceServer list format. Defaults to the built-in STUN servers.

For example [{"urls": "stun:stun.example.org:3478"}], or [] for none. A node with a public address needs none. A file keeps TURN credentials off the command line.

Environment: MINA_WEBRTC_ICE_SERVERS.

The UDP ports for WebRTC candidates, as MIN-MAX, so that a firewall need open only those. Defaults to any port.

Each connection takes a port per local address: allow several per --max-peers.

Environment: MINA_WEBRTC_UDP_PORTS.

The public address of a 1:1 NAT in front of this node, used in its WebRTC host candidates in place of its interface addresses.

For a cloud host whose interface has a private address. Repeat it, or separate addresses with commas, for IPv4 and IPv6.

Environment: MINA_WEBRTC_NAT_IP.

The log level of the console and the log file: error, warn, info, debug or trace.

info logs what an operator follows: the settings at startup, sync progress, each new best tip, a status line with the peer count, the blocks produced, the SNARK work sold, warnings and errors. debug adds detail for diagnosis, and trace adds every action of the state machine.

Alias: --log-level. Default: info. Environment: MINA_VERBOSITY.

Log to the console only, without mina.log

Environment: MINA_DISABLE_FILESYSTEM_LOGGING.

The directory for the log file, mina.log. Defaults to the work directory.

Environment: MINA_LOG_PATH.

The size in MiB at which mina.log is rotated to mina.log.1, older files shifting up one.

Default: 20. Environment: MINA_LOG_FILE_SIZE_MB.

The number of log files kept, mina.log included; the oldest is deleted. The logs take at most --log-file-size-mb times this.

Default: 10. Environment: MINA_LOG_FILE_COUNT.

A daemon config JSON file to start from instead of the network's embedded genesis, as OCaml's --config-file

Environment: MINA_CONFIG.

A genesis config to start from instead of --config's.

It is either a prebuilt config as ledger-tool writes it (bin_prot), or one written with --without-ledgers (JSON). The latter only suits a network that has moved past its genesis, as the ledgers are synced from peers.

Environment: MINA_GENESIS_CONFIG.

Turn off peer discovery: no Kademlia, and no asking peers for more peers.

The node still dials its initial peers. Those are the network's default peers unless peers are given with --peers, --peer-list-file or --peer-list-url, or --seed is set.

The running node's HTTP base URL. The report names the network that node is on.

Default: http://127.0.0.1:3000. Environment: MINA_NODE_URL.

Use only GET /status; omit build and verification statistics.

Print a JSON report, also when a request fails.

Exit with status 1 if the node is not synced, its best tip is missing or older than --max-tip-age, or it has fewer peers than --min-peers

The oldest best tip --check accepts, in seconds.

Default: 1800.

The fewest connected peers --check accepts; peers still connecting don't count.

Default: 1.

Seconds to wait for each HTTP request (1 to 300).

Default: 5.

The store: a chain's frontier directory.

Required.

How much of each ledger to rehash: full (every node), sample (64 leaf paths, as a restart does) or root

Default: full.

• full
• sample
• root

Also rebuild the root staged ledger the slow way, by applying the scan state's transactions again (tens of seconds on mainnet).

Check without taking the store's lock, while a node writes it.

Print the key pair of this secret key instead of a new one.

Environment: MINA_SEC_KEY.

Print the key pair of this secret key instead of a new one.

Environment: MINA_P2P_SEC_KEY.

The encrypted key file. Its password is read from the MINA_PRIVKEY_PASS environment variable.

Required. Environment: MINA_FROM.

The account's public key.

An encrypted key file whose account to query, in place of --address. Its password is read from the MINA_PRIVKEY_PASS environment variable.

The node's HTTP base URL (its --port). Requests go to <URL>/graphql

Default: http://localhost:3000. Environment: MINA_NODE_URL.

The output format.

Default: text.

• text
• json

The encrypted key file of the account delegating its stake. Its password is read from MINA_PRIVKEY_PASS, or asked for on a terminal.

Required.

The public key to delegate the stake to, as OCaml's --receiver

Required.

The transaction fee in MINA, like 0.1, with at most 9 decimal places, as OCaml's --fee

Required.

The nonce. Defaults to the node's inferred nonce for the sender, which counts its pending transactions.

The memo, at most 32 bytes.

The last global slot since genesis in which the delegation may be included. By default it never expires.

The node's HTTP address (its --port). The node must run with --enable-tx-submission

Default: http://localhost:3000. Environment: MINA_NODE_URL.

The output format.

Default: text.

• text
• json

The encrypted key file to write. Neither it nor its .pub file may exist.

Required.

Encrypt this secret key instead of a new one.

Environment: MINA_SEC_KEY.

The sender's encrypted key file. Its password is read from the MINA_PRIVKEY_PASS environment variable.

Required. Environment: MINA_FROM.

The receiver's public key.

Required.

The amount in MINA, like 2.5, with at most 9 decimal places, as OCaml's mina client send-payment --amount

Required.

The transaction fee in MINA, like 0.1, with at most 9 decimal places.

Required.

The memo, at most 32 bytes.

The nonce. Defaults to the sender account's nonce in the node's ledger.

The last global slot since genesis in which the payment may be included. By default it never expires.

The node's HTTP base URL (its --port). The node must run with --enable-tx-submission

Default: http://localhost:3000. Environment: MINA_NODE_URL.

The transaction hash.

Required.

The node's HTTP base URL (its --port).

Default: http://localhost:3000. Environment: MINA_NODE_URL.

Leave out the hint to use this option when the status is UNKNOWN.

It doesn't change the lookup: the transaction pool is searched only when the node answers the status query with an error.

Which ledger of the node's best tip.

Required.

• staged-ledger: The best tip's staged ledger.
• snarked-ledger: The best tip's snarked ledger.
• staking-epoch-ledger: The ledger the current epoch stakes from.
• next-epoch-ledger: The ledger the next epoch will stake from.

The node's HTTP address (its --port). The node must run with --enable-ledger-export

Default: http://localhost:3000. Environment: MINA_NODE_URL.

Write the accounts to this file instead of standard output; a summary goes to standard output.

Recompute the written file's Merkle root and exit with status 4 unless it is the node's (needs --output).

A ledger file as mina ledger export writes it (JSON).

Required.

Exit with status 4 unless the Merkle root is this ledger hash.

Print a JSON object (ledger_hash, num_accounts) instead of the hash.

A ledger file as mina ledger export writes it (JSON).

Required.

The node's HTTP address (its --port). The node must run with --enable-ledger-export

Default: http://localhost:3000. Environment: MINA_NODE_URL.

Directory to create. It must not exist; it gets fork_config.json (every account inline, OCaml's GraphQL fork_config layout), daemon.json and daemon-migrated.json (ledgers by stable and by OCaml 4.0.2's migrated root), manifest.json and, last, an empty activated

Required.

Continue from this best-chain block instead of the newest block before slot_tx_end

Continue from the best-chain block at this height.

Export even if the best tip has not reached slot_tx_end, so that the fork block may still change.

Recompute the three ledgers' stable and migrated roots from fork_config.json and exit with status 4 unless they are the node's.

The node's work directory: last-start.json, crash files, logs and the frontier store are read from it.

Default: ~/.mina. Environment: MINA_HOME.

The running node's HTTP base URL. Default: the port the node last started with (from last-start.json), else http://127.0.0.1:3000.

Environment: MINA_NODE_URL.

A log file to scan (repeatable); - reads standard input, as in journalctl --user -u mina | mina report --log -. By default, scan mina.log and its numbered rotations, newest first, within 8 MiB.

How many warning, error and panic lines to include (1 to 1000).

Default: 100.

How to check the frontier store: root (fast), sample, full (rehashes every ledger) or off

Default: root.

• root
• sample
• full
• off

Keep IP addresses and peer ids in the report (left out by default).

What happened, in a sentence or two. Asked for when not given and the terminal is interactive.

Only save the report to FILE: nothing is sent.

File without asking first.

The GitHub repository to file the issue in.

Default: minanode/mina-rust.

Create the issue with the GitHub CLI (gh), if installed, instead of opening a pre-filled issue page.

Print the pre-filled issue link instead of opening a browser.

Seconds to wait for each answer from the node (1 to 120).

Default: 5.

The node's work directory: last-start.json, crash files, logs and the frontier store are read from it.

Default: ~/.mina. Environment: MINA_HOME.

The running node's HTTP base URL. Default: the port the node last started with (from last-start.json), else http://127.0.0.1:3000.

Environment: MINA_NODE_URL.

A log file to scan (repeatable); - reads standard input, as in journalctl --user -u mina | mina report --log -. By default, scan mina.log and its numbered rotations, newest first, within 8 MiB.

How many warning, error and panic lines to include (1 to 1000).

Default: 100.

How to check the frontier store: root (fast), sample, full (rehashes every ledger) or off

Default: root.

• root
• sample
• full
• off

Keep IP addresses and peer ids in the report (left out by default).

What happened, in a sentence or two. Asked for when not given and the terminal is interactive.

Only save the report to FILE: nothing is sent.

File without asking first.

The GitHub repository to file the issue in.

Default: minanode/mina-rust.

Create the issue with the GitHub CLI (gh), if installed, instead of opening a pre-filled issue page.

Print the pre-filled issue link instead of opening a browser.

Seconds to wait for each answer from the node (1 to 120).

Default: 5.

The agent to run; asked for when both are installed.

• claude
• codex

The model, passed to the agent's --model

Minutes the agent may take (1 to 120).

Default: 15.

Run an agent that can't be kept to the redacted report: codex, whose read-only sandbox limits writes, not reads. It can read any file you can read, key files included, and send it to OpenAI.