Stash review
A free, self-hosted configuration store with an HTTP API, browser UI, and optional Git history.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Stash gives teams a self-hosted place to manage application settings, feature flags, and shared configuration as key-value data. It pairs an HTTP API for reading, writing, and deleting keys with a browser-based interface for managing them. Hierarchical slash-separated paths help organize entries, while documented client libraries cover Go, Python, TypeScript/JavaScript, Java, and Rust. Its free model and SQLite or PostgreSQL storage make it relevant to small teams that want to keep configuration on their own infrastructure rather than use a hosted service.
Change control is a notable strength for teams that need more than basic key access. Optional Git-based history records changes and supports point-in-time restore. Prefix-scoped read and write permissions can be assigned to users and API tokens, and secret paths can use encrypted storage with client-side zero-knowledge encryption. An optional in-memory cache is invalidated when keys change, while Server-Sent Events can notify clients of those changes. These options support varied configuration workflows, but teams should evaluate which features they need and account for operating the service themselves.
Stash is a focused choice for teams comfortable maintaining self-hosted software and seeking a free configuration store with API access, a UI, and optional versioning. Its documentation is the listed support channel, so teams seeking another support path should weigh that against their operational needs. The documented API writes and change notifications do not describe staged or percentage-based rollout controls, so teams needing those mechanisms should consider a different fit. Choose Stash for centralized key-value configuration under your own infrastructure; look elsewhere if managed hosting or broader rollout tooling is essential.
Stash pros and cons
- Where it wins
- Read, write, and delete keys through an HTTP API or browser UI
- Optional Git history supports change review and point-in-time restore
- Prefix permissions and encrypted secret storage add control over sensitive keys
- Where it doesn't
- Requires teams to run it on their own infrastructure
- Optional features such as Git history and caching need configuration
- Documentation is the listed support channel
Stash fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update