Local development
With CLI you can run all your apps in any environment
Effortless local development
With CLI you can run all your apps in any environment
Command-line interface
Access projects, environments and secrets from your favorite terminal.
Zero configuration
Works out of the box with minimal setup - just authenticate and go.
One command environments
Pull the right secrets for your environment in a single command.
stashbase.yaml
- project: our-project
environment: api-prod
description: Production environment (AWS)
file: .env.production
- project: our-project
environment: api-dev
file: .env.development
secrets:
only:
- DATABASE_URL
run:
command: npm run dev
secrets:
expand-refs: true
print: true
- project: our-project
environment: api-testing
secrets:
set:
- NODE_ENV: testing
Reusable configs
Configurable environments. Easily configure environments for your local development for different purposes.
Select secrets you need. You can pull only selected secrets exclude the one you dont need.
Share with your team. Unified environments for local development for your team.
Run with single command. Run your apps in custom environments with a single command.
Pull environments. Save custom environments from config into local files.
Secret detection
Detect and remediate hardcoded secrets in your codebase
Hardcoded Secrets
Automatically detect secrets like API keys and tokens in your code before they leak.
Git Hooks
Use Git hooks to scan your code for secrets before committing or pushing to remote repository.
Continuous Repo Scanning
Continuously monitor your GitHub repositories for exposed secrets.
Easily Configurable
Customize scanning rules and patterns to fit your project’s specific needs.
Real-Time Notifications
Get notified in real-time about hard-coded secrets in your repositories.
Update Stashbase Secrets
Easily update stored Stashbase secrets when they are found hard-coded in your codebase.
AI Fix
Auto-remediate exposed secrets
Let private AI generate and apply commit-ready patches to remove hardcoded secrets from your codebase and rotate/update the matching values in Stashbase.
MCP server
Use Stashbase with your favorite AI tools and agents.
MCP session
client → stashbase.mcp.connect()
tool: List available environments
tool: Read non-sensitive configuration metadata
tool: Delete unused secrets after approval
Access boundaries
Use with favorite tools. Use MCP to connect Stashbase to AI agents, internal tooling, or custom scripts.
No access to secret values. MCP can work with environment context and workflows, but it cannot access secret values.
Standardize tool access. Give agents and internal tooling one consistent interface for environment context.
Environment assistant
Ask questions, draft operational changes, review everything.
New chat
Add secrets for Kubernetes configuration.
Sure! To set up your Kubernetes config, you can add the following secrets.
KUBERNETES_CLUSTER_NAME
KUBERNETES_NAMESPACE
KUBERNETES_DEPLOYMENT_NAME
Operational workflows
Analyze secrets. Identify stale, frequently accessed, or recently updated secrets.
Understand usage patterns. Compare dashboard and API usage behaviors.
Scaffold new secrets. Draft new secrets for services, integrations, and internal tooling.
Delete unused secrets. Remove secrets that are no longer in use.
Draft before saving. Keep changes local until they are reviewed and applied.
Secure by design
You focus on your code, we focus on security
Key management system
Built-in key management system that ensures your data stays secure.
Multi-layer encryption
AES-256 encryption with multiple layers of protection ensures your data is protected.
Role-based access control
Granular permissions to specific resources for users and teams.
World-class developer experience
A tool you will enjoy using everyday
World-class DX
A tool you will enjoy using everyday
Centralized project management
Organize secrets across all projects
Keyboard-first experience
40+ shortcuts for lightning-fast workflow
Designed for teams
Share secrets securely with granular permissions
And more...
Secrets Changelog
Easily track changes and roll back to previous versions.
Secrets Referencing
Reference other secrets in your environment.
Real-time API logs
Track API Key usage in real-time.
Real-Time Webhooks
Monitor webhook deliveries in real-time with detailed logs.
Service Accounts
Access only selected resources with service accounts for enhanced security.
Trusted IPs
Allow only trusted IPs to access your environments and secrets.
Works with your infrastructure
Integrate with your tools you already use
And more...