Developer Tools
BookStack
Self-hosted documentation platform organized into shelves, books, chapters and pages.
What it is
BookStack is an MIT-licensed, self-hosted documentation application built around shelves, books, optional chapters and pages. It provides role and content-level permissions, multiple enterprise authentication options and a permission-aware REST API, but the operator remains responsible for the PHP and database stack, upgrades, filesystem permissions, security configuration and complete database-plus-file backups.
BookStack pricing
BookStack does not publish a plan ladder we could verify. Free.
Prices read from the vendor's own pricing page on 2026-08-24. Vendors change plans without notice — check the source before you budget. Price verification log.
Key features
Book hierarchy
Organizes page content within optional chapters, books and reusable bookshelves.
Roles and permissions
Combines system roles with content-level overrides and inherited controls.
Federated authentication
Documents OIDC, SAML 2.0 and LDAP configuration for self-hosted instances.
REST API
Provides token-authenticated JSON endpoints governed by the API user's permissions.
Strengths and trade-offs
What works well
- Predictable structure: Shelves, books, chapters and pages give teams a constrained documentation hierarchy.
- Granular access: Roles can be combined and overridden at shelf, book, chapter or page level.
- Authentication choices: Official administration docs cover OpenID Connect, SAML 2.0 and LDAP.
- Automation surface: The REST API covers content and administrative resources while enforcing the API user's roles and permissions.
Where it falls short
- Self-hosting burden: PHP, MySQL or MariaDB, web-server configuration, updates and monitoring are operator responsibilities.
- Manual recovery design: There is no built-in full backup and restore; both database records and instance files must be protected.
- Key dependency: Restores need the original APP_KEY for encrypted features such as multi-factor credentials.
- Hierarchy trade-off: The book metaphor is approachable but may constrain teams needing free-form graphs or complex publishing workflows.
Who it is for
Teams that want structured internal documentation and can securely operate a PHP and MySQL-compatible application.
Pick it or skip it
Pick BookStack if
- Internal handbooks, runbooks and technical knowledge bases with a clear hierarchy
- Organizations needing self-hosting, role controls and supported identity integrations
- Teams that can automate upgrades, database and file backups, and restore drills
Skip it if
- You need a vendor-operated SaaS with no infrastructure responsibility
- Your information model cannot fit shelves, books, chapters and pages
- You cannot preserve the database, uploads, configuration and original APP_KEY together
Our verdict
Choose BookStack when its constrained hierarchy matches the knowledge model and self-hosting is deliberate; validate identity mapping, permission inheritance, upgrades and a full database-plus-files restore before broad adoption.
Frequently asked questions
- How much does BookStack cost?
- BookStack is free to use. We verified this against the vendor's own page; see "What we checked" below for the date.
- Does BookStack have a free plan?
- Yes. BookStack is free to use at its base level.
- Who is BookStack best for?
- Teams that want structured internal documentation and can securely operate a PHP and MySQL-compatible application.
- What are the main drawbacks of BookStack?
- The trade-offs we noted: Self-hosting burden: PHP, MySQL or MariaDB, web-server configuration, updates and monitoring are operator responsibilities.; Manual recovery design: There is no built-in full backup and restore; both database records and instance files must be protected.; Key dependency: Restores need the original APP_KEY for encrypted features such as multi-factor credentials..
- When should you not use BookStack?
- Skip BookStack if: You need a vendor-operated SaaS with no infrastructure responsibility; Your information model cannot fit shelves, books, chapters and pages; You cannot preserve the database, uploads, configuration and original APP_KEY together.
What we checked
- Public APIOffers a documented API you can build against.Yes
- Mobile appHas a native app for iOS or Android, not just a mobile website.No
- Open source / self-hostableSource is open and the tool can be run on your own infrastructure.Yes
- SSO (SAML)Supports SAML single sign-on on at least one plan.Yes
“Not checked” means exactly that — we have not verified it, and we do not guess.
Evidence and freshness
Status: Official sources reviewedReviewed: 2026-08-24
- BookStack Docs — Installation ↗
Checked 2026-08-24 · Supports: self-hosted deployment, PHP and database requirements, Composer and Git requirements, filesystem permissions, shared-hosting limitation, high-availability caveats
- BookStack Docs — Content overview ↗
Checked 2026-08-24 · Supports: shelves books chapters and pages, optional chapters, multi-shelf books, content organization
- BookStack Docs — Roles and permissions ↗
Checked 2026-08-24 · Supports: multiple roles, system permissions, content-level overrides, inheritance behavior, SAML and LDAP group synchronization
- BookStack Docs — Authentication index ↗
Checked 2026-08-24 · Supports: OpenID Connect documentation, SAML 2.0 documentation, LDAP documentation, security and maintenance documentation
- BookStack Demo — REST API documentation ↗
Checked 2026-08-24 · Supports: REST API, token authentication, role permission enforcement, JSON interface, rate limits, content security caveat, documented resources
- BookStack Docs — Backup and restore ↗
Checked 2026-08-24 · Supports: no built-in full backup, database backup, file backup, off-device copy guidance, APP_KEY restore dependency, URL migration steps
- BookStack Docs — Updates ↗
Checked 2026-08-24 · Supports: regular releases, pre-update backup, Git Composer and migration update process
- BookStack source — License ↗
Checked 2026-08-24 · Supports: MIT license, open-source status
Limit: Official project documentation and the project-hosted demo API reference were reviewed; ToolCompare did not install BookStack, test authentication or permission edge cases, inspect API completeness, assess custom themes, execute an upgrade, penetration-test the service, benchmark scale or perform a backup restore.
Tools that do the same job as BookStack
Same job, different pricing. Verified starting price first.
More Developer Tools tools: see the full Developer Tools category
