The Truestamp CLI

Create, download, and verify cryptographic proofs from your terminal. A single static binary. No dependencies. Works fully offline.

$ curl -fsSL https://get.truestamp.com/install.sh | sh

Or install with Homebrew or Go

macOS · Linux · Windows

Single static binary

Works fully offline

Signed releases

Open source

Building an integration?

Truestamp offers REST and GraphQL APIs for programmatic access from any language or platform.

Explore the API

What you can do

Three commands cover the main flow. More are available for scripting and advanced use.


              truestamp create

Create

Hash a file locally and submit the claim to the Truestamp API.


              truestamp download

Download

Fetch the cryptographic proof once the item is committed to a block.


              truestamp verify

Verify

Confirm a proof is authentic and the original data is unchanged. Fully offline.

Want to learn more? Consult the README or the EXAMPLES.md for a full suite of usage examples.

Trust-independent verification

Anyone can verify. Anywhere. Forever.

Every proof is a self-contained artifact. Once you download it, it verifies with the open-source CLI. Offline, without a Truestamp account, and without trusting us. Even if the item is later deleted from Truestamp, the proof you kept still verifies.

No account needed

Share a proof with anyone. They can verify without signing up for Truestamp.

No network needed

You can run verification completely offline, with no calls to our servers.

Open source

The CLI is open-source and auditable. Trust the math, not the company.

Install

Pick a method. All paths ship the same static binary.

One-line install for macOS and Linux. Recommended. Verifies SHA-256 automatically.

Install

$ curl -fsSL https://get.truestamp.com/install.sh | sh

Upgrade

$ truestamp upgrade

Install-method aware. Verifies SHA-256 and cosign signature.

Install with Homebrew on macOS or Linux.

Install

$ brew install truestamp/tap/truestamp-cli

macOS first run

$ xattr -cr "$(brew --caskroom)/truestamp-cli"

Run once on macOS after install or upgrade. The binary is not yet Apple-signed, so Gatekeeper would otherwise block it. Clearing the quarantine attribute lets it launch without a dialog. Not needed on Linux.

Upgrade

$ brew upgrade truestamp/tap/truestamp-cli

Build from source with Go 1.26 or newer.

Install or upgrade

$ go install github.com/truestamp/truestamp-cli/cmd/truestamp@latest

Re-run the same command to update to the latest release. Installs to $GOBIN (default ~/go/bin).

Run truestamp help to explore all commands.

Full docs on GitHub

Why use the CLI

CI/CD pipelines

Script attestation in GitHub Actions, GitLab, and any shell-driven pipeline.

Air-gapped environments

Verify on isolated networks, behind firewalls, or in regulated environments.

Batch and archival

Process many files, export portable binary or JSON proofs.