Install the CLI
wardkey is a single signed binary. All artifacts are published to packages.wardkey.app and to GitHub releases at wardkeyapp/cli.
Linux
One-liner (recommended)
Works on Debian / Ubuntu / Mint / Pop!_OS / RHEL / Fedora / Rocky / Alma. The script detects your package manager, adds the Wardkey repo + GPG key, and installs the wardkey package.
curl -fsSL https://packages.wardkey.app/install.sh | sudo sh
Inspect the script before piping it to a shell:
curl -fsSL https://packages.wardkey.app/install.sh | less
Manual APT setup
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://packages.wardkey.app/wardkey.gpg \
| sudo tee /etc/apt/keyrings/wardkey.gpg >/dev/null
sudo chmod 0644 /etc/apt/keyrings/wardkey.gpg
echo "deb [signed-by=/etc/apt/keyrings/wardkey.gpg] https://packages.wardkey.app/apt stable main" \
| sudo tee /etc/apt/sources.list.d/wardkey.list
sudo apt-get update
sudo apt-get install -y wardkey
Manual YUM / DNF setup
sudo tee /etc/yum.repos.d/wardkey.repo >/dev/null <<'EOF'
[wardkey]
name=Wardkey Package Repository
baseurl=https://packages.wardkey.app/yum/stable
enabled=1
gpgcheck=1
gpgkey=https://packages.wardkey.app/wardkey.gpg
EOF
sudo dnf install -y wardkey
Windows
Download from the latest release:
wardkey_<version>_windows_amd64.msi— double-click to install (recommended). Addswardkey.exeto the systemPATH.wardkey_<version>_windows_amd64.exe— standalone binary. Drop it on yourPATH.
Both artifacts are signed by Bitspire via Azure Trusted Signing.
Silent install:
msiexec /i wardkey_<version>_windows_amd64.msi /quiet
macOS
From source
You need Go 1.26+ and a checkout of wardkeyapp/cli alongside its sibling SDK repo (the CLI's go.mod carries a replace directive that resolves the SDK from ../sdk-go).
cd cli
go install ./cmd/wardkey
The binary lands in $(go env GOBIN) (or $(go env GOPATH)/bin). Make sure that directory is on your PATH.
Verify
wardkey --version
wardkey --help
Next: authenticate the CLI →