Three paths to Stack
Pick the one that matches where you are. You can mix and match — most users start with the quickstart, then come back for the CLI reference.
Quickstart
Install, stack init, then
stack add supabase. Five minutes,
real output.
CLI reference
Every stack command with flags,
defaults, and real examples.
Providers
39 curated providers. What each one wires, which MCP it brings online, where its dashboard is.
What Stack is
Stack is a thin control plane over the services your app actually uses. It
drives the provider login, creates upstream resources (a Supabase project,
a Neon DB, a Sentry project), fetches their credentials, hands the secrets
to Phantom for encryption, and wires
.env.local, .mcp.json, and .stack.toml
in one shot.
# before: 45 minutes across 6 tabs
# after:
stack add supabase What Stack isn't
- Not a secret manager. Every secret is stored by Phantom. Stack only knows the slot names.
- Not a deploy tool. We don't rebuild Vercel or Railway — we just give them the keys they need.
- Not a lock-in. Everything writes to standard files:
.env,.mcp.json,.stack.toml(TOML). Rip Stack out and your project still boots.
The whole map
Everything in these docs, grouped by purpose:
- stack addSDK auto-install, transactional rollback, and generating .env.example.
- Provider swapMigrate between providers in the same category — Clerk → Auth0, Supabase → Neon, and 36 more pairs.
- MaintenanceKeep .stack.toml in sync with your codebase using doctor --reconcile and remove --all-orphans.
- Stack vs PulumiPulumi builds cloud infra in real code; Stack wires third-party SaaS.
- Stack vs TerraformTerraform is IaC for cloud primitives; Stack is the SaaS control plane.
- Stack vs RailwayRailway is a deploy platform; Stack composes across 39 providers (Railway is one of them).
- Stack vs DopplerDoppler is a cloud secret manager; Stack + Phantom is local-first E2E vaulting tied to provisioning.
- ChangelogShipped features, hardening passes, and redesigns — in reverse-chronological order.
- RoadmapWhat's shipped, in-progress, considered, and explicitly off the table.
- TelemetryWhat's collected, what isn't, and three ways to opt out.
- Privacy PolicyFull data policy — fields collected, retention schedule, and changelog.