solana-keychain/.env.example at main · solana-foundation/solana-keychain · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
# Solana RPC endpoint (required for all signers)
SOLANA_RPC_URL=https://api.devnet.solana.com

# Privy Configuration (for SIGNER_TYPE=privy)
PRIVY_APP_ID=your-privy-app-id
PRIVY_APP_SECRET=your-privy-app-secret
PRIVY_WALLET_ID=your-privy-wallet-id
# PRIVY_API_BASE_URL=https://api.privy.io/v1  # Optional, defaults to this

# Turnkey Configuration (for SIGNER_TYPE=turnkey)
TURNKEY_API_PUBLIC_KEY=your-turnkey-api-public-key-hex
TURNKEY_API_PRIVATE_KEY=your-turnkey-api-private-key-hex
TURNKEY_ORGANIZATION_ID=your-turnkey-organization-id
TURNKEY_PRIVATE_KEY_ID=your-turnkey-private-key-id
TURNKEY_PUBLIC_KEY=your-solana-public-key-base58
# TURNKEY_API_BASE_URL=https://api.turnkey.com  # Optional, defaults to this

# Vault Configuration (need the vault cli to run those integration tests) (start-vault.sh after that)
VAULT_ADDR=http://127.0.0.1:8200
VAULT_TOKEN=root
VAULT_KEY_NAME=solana-test-key
VAULT_SIGNER_PUBKEY=2vfDxWYbhRt7GXiRYKf1Dr5Z8y7zVQCSERbDTKyBaAqQ

# Para Configuration (for SIGNER_TYPE=para)
PARA_API_KEY=sk_your-para-secret-key
PARA_WALLET_ID=your-para-wallet-id
# PARA_API_BASE_URL=https://api.getpara.com  # Optional, defaults to this

# Fireblocks Integration Tests
FIREBLOCKS_API_KEY=your-fireblocks-api-key
FIREBLOCKS_PRIVATE_KEY_PEM="-----BEGIN PRIVATE KEY-----
your-rsa-4096-private-key-here
-----END PRIVATE KEY-----"
FIREBLOCKS_VAULT_ACCOUNT_ID=0
# FIREBLOCKS_ASSET_ID=SOL  # Optional, defaults to SOL (use SOL_TEST for devnet)
# FIREBLOCKS_API_BASE_URL=https://api.fireblocks.io  # Optional, defaults to this

# Crossmint Integration Tests
CROSSMINT_API_KEY=your-crossmint-api-key
CROSSMINT_WALLET_LOCATOR=your-wallet-address-or-locator
# CROSSMINT_API_BASE_URL=https://www.crossmint.com/api  # Optional, defaults to this
# CROSSMINT_SIGNER_SECRET=xmsk1_your-64-hex-secret  # Optional, for server key signing (auto-derives signer locator)
# CROSSMINT_SIGNER=server:your-derived-pubkey  # Optional, set explicitly if not using CROSSMINT_SIGNER_SECRET
# TEST_CROSSMINT_SIGNER_DERIVED_PUBKEY=your-derived-pubkey  # Optional, test-only override for Crossmint signer pubkey validation

# Dfns Integration Tests
DFNS_AUTH_TOKEN=your-dfns-auth-token
DFNS_CRED_ID=your-credential-id
DFNS_PRIVATE_KEY_PEM="-----BEGIN PRIVATE KEY-----
your-private-key-here
-----END PRIVATE KEY-----"
DFNS_WALLET_ID=your-wallet-id
# DFNS_API_BASE_URL=https://api.dfns.io  # Optional, defaults to this

# GCP KMS Integration Tests (uses Application Default Credentials)
GCP_KMS_KEY_NAME=projects/your-project/locations/us-east1/keyRings/your-keyring/cryptoKeys/your-key/cryptoKeyVersions/1
GCP_KMS_SIGNER_PUBKEY=YourSolanaPublicKeyBase58Here

# AWS KMS Integration Tests
AWS_KMS_KEY_ID=arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
AWS_KMS_SIGNER_PUBKEY=YourSolanaPublicKeyBase58Here
# AWS_KMS_REGION=us-east-1  # Optional, defaults to AWS config default region
# AWS_ACCESS_KEY_ID=  # Optional, defaults to AWS credential provider chain
# AWS_SECRET_ACCESS_KEY=  # Optional, defaults to AWS credential provider chain

# Openfort Integration Tests
OPENFORT_SECRET_KEY=sk_test_your-openfort-secret-key
OPENFORT_ACCOUNT_ID=acc_your-openfort-account-id
OPENFORT_WALLET_SECRET=your-base64-pkcs8-der-or-pem-wallet-secret
# OPENFORT_BASE_URL=https://api.openfort.io  # Optional, defaults to this

# CDP (Coinbase Developer Platform) Configuration
# Create API keys at https://portal.cdp.coinbase.com
CDP_API_KEY_ID=your-cdp-api-key-id
CDP_API_KEY_SECRET=your-cdp-api-key-secret
CDP_WALLET_SECRET=your-cdp-wallet-secret
CDP_SOLANA_ADDRESS=YourSolanaPublicKeyBase58Here