The tee command provides access to Trusted Execution Environment (TEE) deployment and management capabilities through integrated vendor CLIs.

​
Overview

TEE (Trusted Execution Environment) enables secure and verifiable agent operations on blockchain. The tee command currently supports Phala Cloud as a TEE provider, with the potential for additional vendors in the future.

​
Installation

bun install -g @elizaos/cli

​
Command Structure

elizaos tee <vendor> [vendor-specific-commands]

​
Available Vendors

​
Phala Cloud

The phala subcommand provides a wrapper for the official Phala Cloud CLI, allowing you to manage TEE deployments on Phala Cloud directly through elizaOS. 
elizaos tee phala [phala-cli-commands]
The Phala CLI will be automatically downloaded via bunx if not already installed.

​
Usage Examples

​
Get Phala CLI Help

# Display Phala CLI help
elizaos tee phala help

# Get help for a specific Phala command
elizaos tee phala cvms help

​
Authentication

# Login to Phala Cloud with your API key
elizaos tee phala auth login <api-key>

# Check authentication status
elizaos tee phala auth status

​
Managing CVMs (Confidential Virtual Machines)

# List all CVMs
elizaos tee phala cvms list

# Create a new CVM
elizaos tee phala cvms create --name my-agent-app --compose ./docker-compose.yml

# Get CVM details
elizaos tee phala cvms get <cvm-id>

# Update a CVM
elizaos tee phala cvms update <cvm-id> --compose ./docker-compose.yml

# Delete a CVM
elizaos tee phala cvms delete <cvm-id>

​
Additional Phala Commands

The Phala CLI also provides these additional commands: 
# Docker Registry Management
elizaos tee phala docker login       # Login to Docker Hub
elizaos tee phala docker logout      # Logout from Docker Hub

# TEE Simulator (for local testing)
elizaos tee phala simulator start    # Start local TEE simulator
elizaos tee phala simulator stop     # Stop local TEE simulator
elizaos tee phala simulator status   # Check simulator status

# Demo Deployment
elizaos tee phala demo deploy        # Deploy a demo application to Phala Cloud
elizaos tee phala demo list          # List deployed demos
elizaos tee phala demo delete <id>   # Delete a demo deployment

# Account Management
elizaos tee phala join               # Join Phala Cloud and get a free account
elizaos tee phala free               # Alias for join - get free CVM credits

# Node Management
elizaos tee phala nodes list         # List available TEE nodes
elizaos tee phala nodes get <id>     # Get details about a specific node

​
TEE Agent Deployment

For deploying elizaOS agents to TEE environments:
  1. First, create a TEE-compatible project: 
    elizaos create my-tee-agent --type tee
  2. Configure your agent and prepare deployment files
  3. Deploy to Phala Cloud: 
    elizaos tee phala cvms create --name my-tee-agent --compose ./docker-compose.yml

​
Configuration

​
Prerequisites

  • Bun installed (required for automatic Phala CLI installation)
  • Phala Cloud account and API key (for deployment operations)
  • Docker compose file for CVM deployments

​
Environment Variables

When deploying TEE agents, ensure your environment variables are properly configured: 
# Set up your Phala API key
export PHALA_API_KEY="your-api-key"

# Or add to your .env file
echo "PHALA_API_KEY=your-api-key" >> .env

​
Advanced Usage

​
Direct Phala CLI Access

All Phala CLI commands and options are available through the wrapper: 
# Any Phala CLI command can be used
elizaos tee phala [any-phala-command] [options]
For the complete list of Phala CLI commands and options, run: 
elizaos tee phala help
Or visit the official Phala CLI documentation: 
bunx phala help

​
Troubleshooting

​
Common Issues

  1. bunx not found: Install Bun from bun.sh: 
    curl -fsSL https://bun.sh/install | bash
  2. Authentication failures: Ensure your API key is valid and you’re logged in: 
    elizaos tee phala auth login <api-key>
  3. Deployment errors: Check your docker-compose.yml file is valid and all required services are defined

​
Debug Mode

For detailed output when troubleshooting: 
# Run with verbose logging
LOG_LEVEL=debug elizaos tee phala cvms list

​
Integration with elizaOS

TEE deployments enable:
  • Secure key management: Private keys never leave the TEE
  • Verifiable computation: Cryptographic proof of agent behavior
  • Blockchain integration: Direct onchain operations with attestation
  • Privacy preservation: Sensitive data processing in secure enclaves

​
Security Considerations

When deploying agents to TEE:
  1. Never commit private keys or sensitive configuration
  2. Use environment variables for secrets
  3. Verify attestation reports for production deployments
  4. Follow Phala Cloud security best practices