> For the complete documentation index, see [llms.txt](https://argon-4.gitbook.io/argon-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://argon-4.gitbook.io/argon-docs/using-enclave/tools.md).

# Tools

Tools: token, collectible and identity creation, Note Management, asset discovery, the Covenants catalog, PSKT signing, message signing, and the transaction decoder.

Tools gathers the instruments that sit behind everyday use. None of them changes how SureSign works: each one either reads, or produces a normal SureSign review.

Studio: **Tools** on the rail — **Token tools · Collectible tools · Identity tools · Notes · Asset scan · Covenants · PSKT · Message · Decode**. Compact: the same tools under **Menu**, where Covenant Lab appears once you turn it on under **Beta**. Each register (Holdings, Collectibles, Names) ends with a link to its tools.

## Token tools

**Mint tokens** and **Create a token**. Each opens a choice of protocol, and the choice opens the form for it:

| Action             | Protocol                   | Fields                                                                                   | Protocol fee                               |
| ------------------ | -------------------------- | ---------------------------------------------------------------------------------------- | ------------------------------------------ |
| **Mint tokens**    | KRC-20 (Kaspa inscription) | Ticker, optional recipient                                                               | 1 KAS per mint                             |
| **Create a token** | KRC-20 (Kaspa inscription) | Ticker, max supply, per-mint limit, decimals (default 8), optional premine and recipient | 1,000 KAS                                  |
| **Create a token** | KCC20 (Kaspa covenant)     | Name, symbol, precision, one to three allocations                                        | None; the cells carry KAS the review names |

KRC forms are commit-and-reveal packages reviewed by SureSign; each pays the protocol's own fee as the fee of the reveal transaction, which the review names. Protocol fees are set by Kasplex, not by Enclave, and Enclave adds no fee of its own. Marketplace listing and sale operations are not offered; SureSign refuses them. Covenant tokens are described under [Holdings → Covenant tokens](/argon-docs/using-enclave/holdings.md#covenant-tokens).

## Collectible tools

**Mint collectibles** and **Create a collection**, KRC-721 today with the same protocol choice ready for others:

| Action                  | Protocol                    | Fields                                                                                                                            | Protocol fee                                                  |
| ----------------------- | --------------------------- | --------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------- |
| **Mint collectibles**   | KRC-721 (Kaspa inscription) | Ticker, optional recipient                                                                                                        | 10 KAS per mint, plus the collection's royalty if it sets one |
| **Create a collection** | KRC-721 (Kaspa inscription) | Ticker, max supply, metadata URI, optional royalty (KAS) and royalty address, mint start (DAA), premint count, optional recipient | 1,000 KAS, plus 10 KAS per preminted item                     |

Protocol fees are set by the KAT KRC-721 protocol, not by Enclave.

## Identity tools

**Register an identity** opens the choice between a `.kas` name on Kaspa (KNS) and a `.igra` name on Igra (INS). **Inscribe text** attaches a plain-text record under KNS.

* **`.kas` name.** As you type, the form reads whether the name is taken from the KNS indexer and shows the registration fee from SureSign's own schedule: 4,200 KAS for one or two characters, 2,100 KAS for three, 525 KAS for four, and 35 KAS for five or more. The fee is paid on the reveal to the KNS protocol's published fee address, never to Enclave; the review names it again. A taken name or an unanswered lookup cannot be planned.
* **`.igra` name.** Choose *Forever* or *Annual* (1 to 10 years). Availability and the total price in iKAS are read from the pinned INS registry as you type and read again when the review is prepared. Igra names register on Igra mainnet only; elsewhere the choice is shown but held.
* **Inscribe text.** Plain text only, for 1 KAS on the reveal. MIME and file inscriptions stay refused.

Names are lookup facts from their registries, not Kaspa consensus. Holding, transferring and managing names is described under [Collectibles and names](/argon-docs/using-enclave/collectibles-and-names.md#names).

## Notes

Individual control of the Notes (UTXOs) behind your balance: labels, freezing, selection, consolidation, and watch-only addresses. Described in full under [Notes](/argon-docs/using-enclave/notes.md).

## Asset scan

Choose **Scan for missing assets** to search this account’s receive, change and archived addresses, including after restoring a wallet. The tool shows the public sources being queried, saved address coverage, and source errors. A completed scan covers the displayed addresses and sources; unchecked addresses and unavailable sources remain unknown.

**Pause scan** saves your place so **Resume scan** can continue. **Stop scan** ends that run. A new full scan is available once every 24 hours, and a provider may require a wait before resuming. Saved assets remain visible while the scan runs. Scanning does not prepare, sign or broadcast a transaction.

## Covenants

A read-only view of the covenant templates SureSign knows and the covenant scripts found on your own Notes.

* **Catalog.** Every built-in template with its family, version, and the pinned SilverScript and KCC hashes it derives from. Each template says whether Enclave can **Create** it (TimeLock, Inheritance, Last Will, and the two Escrow forms) or whether it is **inspect-only**. Templates from outside the catalog do not exist as far as SureSign is concerned.
* **On this snapshot.** Notes that carry a covenant id or recognized Toccata opcodes, with their script class and amount.
* **Script identification.** Paste a script to see which opcodes and template SureSign recognizes.

Recognition is not authorization. A recognized script is still refused for spending unless it belongs to a program the kernel has a proven spend path for. See [Covenants](/argon-docs/suresign/covenants.md).

## PSKT

A **partially signed Kaspa transaction** is a transaction assembled by someone else, usually a dApp or another wallet, that needs your signature on some of its inputs. Paste it, list the inputs that are yours (`0` or `0,1`), and choose **Inspect** to see which inputs SureSign would sign and which would stay untouched. **Sign listed inputs** produces a SureSign review; on approval the signed PSKT appears below, ready to hand back. Nothing is broadcast from here.

SureSign's PSKT rules are strict, and they are the same whether the request arrives here or from a connected site:

* only the inputs you list, and only if the wallet controls them;
* every other input byte-for-byte unchanged;
* `SIG_HASH_ALL` only; any other signing mode is refused;
* the review shows the whole transaction, including inputs that are not yours, so you see what you are joining.

## Message

**Sign a message** proves an address is yours with a signature over text (KIP-5). It transfers no KAS and grants no site permission. Choose the message, review it in SureSign, and copy the signature. Connected sites may request the same through the provider; the request appears in the same review. See [Connected sites](/argon-docs/using-enclave/connected-sites.md).

## Decode

Paste raw transaction hex (Borsh encoding, not explorer JSON) and SureSign shows the review it would present for that transaction against your current snapshot: outputs, fees, Notes it would spend, and any protocol it recognizes. Decode does not sign and does not broadcast; it is a way to read a transaction before anyone signs it, and the same decoder SureSign runs on its own output after signing.
