Give ops and QA safe database access
Browsers, not credentials.
Truffle for SQL, Stash for Redis, Depot for object storage — browser-based access with action-level permissions.
The problem
QA needs to verify data. Support needs to check a customer’s queue. Ops needs to clean up a broken row. You’ve been handing out master credentials and hoping for the best.
Our answer
Truffle, Stash, and Depot each offer a per-environment web UI with per-user permissions. Download, rename, delete — each is independently toggleable. Signed URLs replace credential handoff.
Outcomes
- Non-engineers get the data without the keys
- Action-level permission matrix per environment
- Signed URLs for time-boxed file access
- One dashboard per data source — no tab sprawl
The pipeline
- 1
Deploy per environment
Run one instance per dev/staging/prod with its own permission matrix.
- 2
Wire up auth
OAuth, LDAP, or internal OIDC. Roles map to the same permissions you already use.
- 3
Give out the URL
Non-engineers go to `stash.int.company.com` and see exactly what their role allows — nothing more.
- 4
Audit what happens
Every write is logged. Pair with Flytrap if you want a live tail of the activity.
Products in this pattern
The products that make the pattern work. Each is a Docker image; each slots into the same contract.
Truffle
Storage
A web SQL browser for MySQL / PostgreSQL — query, edit, and manage tables without handing out master credentials.
Stash
Storage
A web GUI for Redis / Valkey — browse keys by namespace, edit values, delete patterns, and view server stats without admin credentials.
Depot
Storage
A web GUI for browsing and managing object storage (S3, MinIO, Azure Blob) without exposing admin credentials to developers.
Parachute
Auto-CMS
A single binary that reads any database schema and generates a working CMS — tables, rows, relationships, and field-type inference included, no migrations required.
Related industries
Ship the blocks. Focus on the product.
Docker-ready microservices you can deploy in an afternoon. Learn one, use them all.