Open Source App Cloud Marketplace

Building LangGraph agents in code means imagining the graph; LangGraph GUI turns that graph into something you draw, wire, and run from the browser instead. You place a start node, add step nodes, and drag edges between ports to define the flow, with cycles created by simply connecting nodes back toward each other. Condition nodes split execution into green true paths and red false paths, info nodes append context to stage output, and subgraph nodes run a whole named graph inside another one. Tool steps call real Python functions that you define in tool nodes with the familiar decorator style, so file saving, lookups, and custom logic sit inside the visual flow. Graphs save to JSON on your computer, load back for editing, and upload to the server as workflow files ready to execute. You configure which LLM to use and its API key in the panel, run against local models through Ollama or hosted APIs, then download every file the run produced in the workspace. Files upload to the server workspace as working environment, and a cache clean clears it between runs. Example graphs for role-playing loops, lottery branch switches, and tool-using flows show patterns you can copy and refine with your own prompts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Hunting for the hole is only half the job, because a scanner alert nobody believes wastes more time than the bug itself. Add a domain, CIDR, or bug-bounty scope and Reconner builds the map first: passive and active subdomain enumeration, live HTTP probing and fingerprinting, JavaScript analysis that digs endpoints, secrets, and API keys out of bundles, plus parameter and hidden-param discovery. Then it attacks what it mapped with a context-aware engine covering reflected, stored, and DOM XSS, SQL, NoSQL, SSRF, IDOR, LFI, SSTI, XXE, injection, and open redirects, and every candidate has to survive differential, out-of-band, or control-based proof, re-verified before it is ever reported. Blind issues are not dropped either: OAST callbacks catch out-of-band SSRF, RCE, SQLi, and SSTI that never respond inline. Networks get the same treatment, with port scanning, service detection, network-CVE checks, and IP-camera auditing. Findings land in a live dashboard streamed over WebSocket, with an attack-path view, coverage ledger, monitoring diffs, and HTML, Markdown, and PDF reports, while Telegram can alert you and even start, stop, or resume scans remotely. Run it only against assets you own or are authorized to test; behind a VPN and TLS it becomes your private proving ground. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Bridging local hardware and cloud intelligence, OwnPilot orchestrates autonomous multi-channel agent swarms and visual workflow pipelines while keeping sensitive personal records strictly on private infrastructure. Users can trigger autonomous task runs that browse websites using headless browser automation, extract data tables, and summarize research directly into encrypted markdown notebooks. The built-in workflow canvas allows individuals to construct branching automation sequences combining large language models, conditional logic gates, iterative data loops, and human-in-the-loop approvals. Users delegate calendar scheduling, task tracking, expense budgeting, and contact lookups through conversational chats conducted over web portals, Telegram bots, or WhatsApp numbers. Operators can dispatch coding agents to inspect local repositories, execute shell commands in sandboxed environments, and stream live terminal logs as automated patches develop. The platform also enables home automation enthusiasts to monitor MQTT telemetric feeds from microcontrollers, queue device commands, and receive instant alert notifications when sensor thresholds trigger. Advanced security layers inspect all incoming prompts for personal data patterns, enforce strict permission boundaries across file directories, and generate tamper-evident audit logs for every autonomous tool call. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Training, meals, and body changes usually live in three different apps, and LiftCut puts them in one bilingual tracker where an AI agent helps keep the log instead of just drawing charts. Tell it what you ate, what you lifted, or what the scale said in plain language, in Chinese or English, and it prepares the entry from the exact numbers you gave, never inventing nutrients or weights, and saves nothing until you confirm it. Workout plans are editable rather than rigid programs, text import brings existing routines in, logging tracks completion and exercise performance, and personal records and PDF exports mark how far you have come. Food logs roll into nutrition summaries, and dated body measurements draw trend charts beside your training, so cause and effect sit on the same screen. AI training and nutrition proposals read your saved goals, restrictions, measurements, and recent actual loads first, then pass through extraction, strict validation, and an editable preview, and a proposal is rejected if the records it relied on changed in the meantime. Begin in the public no-sign-in demo or local-first guest mode, then create an account and migrate your history when ready, with offline queues holding entries until a connection returns. Providers span DeepSeek, any OpenAI-compatible endpoint, or a local vLLM server, so the intelligence can stay on hardware you control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Ignidash answers the big retirement question, will my money last, with simulations you can run on your own server. Describe incomes, expenses, accounts, and contribution order, and the simulator reports your retirement age, portfolio at retirement, lifetime taxes, and final balance. Run hundreds of Monte Carlo trials to see your probability of success, or replay your plan against real historical market data to see how it would have fared. US tax estimation shows how withdrawals, asset location, and income changes move your tax bill, with tabs for net worth, cash flow, taxes, returns, contributions, and withdrawals. A net worth tracker lists assets like checking, 401(k), brokerage, and real estate beside liabilities. Several plans can live side by side, for instance a standard plan and an early retirement plan, each with its own results. Ask the AI chat about Roth conversion ladders or early withdrawal rules and it answers with your plan in mind, and AI insights write plain-language overviews of taxes, required distributions, and withdrawal strategy. Light and dark themes are included. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every cloud account grows the same way: a test instance nobody shut down, a storage bucket from a migration two years ago, a database whose owner left the company. Steward walks all four of your clouds, AWS, Alibaba Cloud, Google Cloud and Microsoft Azure, and writes down what is actually running in one inventory you can search instead of four consoles you half remember. The point is not the list, it is what the list connects to: open any resource and see its relationships, which services depend on it, what shares its network, what breaks if it disappears. Cleanup stops being a leap of faith, because every candidate deletion is reviewed against that dependency map first, showing the impact before execution and following the result of each action afterwards. Scheduled scans keep the picture honest without you remembering to look, reporting exactly which resources each scan added, removed or modified, and pinging Slack, Feishu, DingTalk or WeCom when a scan fails. Connect accounts, including through OIDC, run the first sweep, and the orphaned, idle and forgotten start standing out from the infrastructure you actually need. It runs as a single executable with the web console and database built in, under systemd on your server, behind your HTTPS proxy with token sign-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Ziit tracks where your coding hours actually go and shows the answer in a dashboard you host yourself. Install the extension in VS Code, any of its forks, or a JetBrains IDE, and every editing session streams to your instance with its project, language, editor, file, branch, and operating system attached. The dashboard filters by time range and breaks your work down by project and language, so a week of effort becomes a readable chart instead of a vague memory. You sign in with GitHub or email and password, import existing history from WakaTime or a WakAPI instance, and keep building on years of data instead of starting over. README badges embed live coding time for a project into any repository page, turning your profile into a quiet proof of work. A public stats page summarizes the whole instance, and a public leaderboard ranks who logged the most coding hours, which makes self-hosted instances double as community scoreboards. Because the server, the database, and the extensions are all yours, no third-party service sees which files you opened or how long a private project took. Teams can run one instance for everyone and compare effort across projects with the same filters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

JobSpy API turns seven major job boards into a single REST endpoint, aggregating listings from LinkedIn, Indeed, Glassdoor, Google Jobs, ZipRecruiter, Bayt, and Naukri through one GET request. Built on FastAPI with the Python JobSpy scraping library, the API returns structured JSON or downloadable CSV containing job titles, companies, locations, salaries, descriptions, posting dates, and direct application URLs. Filters cover search terms, location, distance radius, job type (full-time, part-time, contract, internship), remote status, hours since posting, country, and salary range. Interactive Swagger UI and ReDoc interfaces provide try-it-now functionality for testing queries directly in the browser. Security includes x-api-key header authentication with configurable rotation, per-endpoint rate limiting with adjustable thresholds, and response caching with configurable TTL to reduce redundant scraping. Global proxy support routes outbound requests through HTTP/HTTPS proxies to avoid IP-based rate limiting from job boards. Environment variables control everything from default search parameters and logging levels to CORS origins and documentation paths. Health check and ping endpoints integrate with uptime monitoring services. Docker Compose exposes the API on a configurable port. MIT licensed.

Ambry is a personal audiobook streaming server that keeps a collection you own on hardware you control, ready to stream to any browser or phone. Upload your audiobook files once, and the library becomes streamable to any device through a browser or the native mobile application. The server reads durations, tags, and chapter markers straight from the audio files, so a long novel arrives with its structure intact instead of as one anonymous ten-hour blob, and the original files are served untouched. First boot walks you through creating the initial administrator account, after which the instance restarts ready for listening. Households can open registration to family members or close it entirely, keeping the library an invitation-only shelf. Forgotten passwords and registration messages go out through the configured mail provider, so account recovery works without manual intervention. The collection itself lives in PostgreSQL with uploads on a persistent volume, and the whole service runs from a container image on a configurable port. Put a commute listen on your phone, a history title on a kitchen tablet, and a shared family library behind one address, all served from hardware you control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

HomeLabInfo gives your homelab one dashboard where the network itself and everything running on it finally appear together, instead of scattered across router pages and terminal sessions. It watches for new devices the instant they ask the network for an address, identifies who made them, and can fire a webhook so you hear about a stranger joining your LAN before you notice it yourself. Scans keep track of which devices are online and which have gone quiet, and the interactive topology view lets you arrange the map of switches, access points, NAS boxes, and servers the way your rack actually looks. Lightweight agents installed on each machine report their containers back to the hub, so running and stopped containers, uptime, health, and host CPU, memory, and disk all show in one place without opening a separate tool per server. When an agent falls behind, its card tells you a newer version exists instead of leaving you guessing. You can add a username and password login before putting the dashboard anywhere beyond your desk, and arrange container layouts that stay put between visits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Audio lectures become structured, Markdown-formatted notes in about a minute with ScribeWizard (also known as GroqNotes). Upload an MP3, WAV, or M4A file - or paste a YouTube link - and the app runs a three-stage pipeline on Groq's LPU inference hardware: Whisper Large v3 transcribes the audio, a larger Llama model drafts a comprehensive outline of the material, and a faster Llama model fills each section with detailed content. This scaffolded prompting strategy is the core idea: the strong model handles structure where quality matters most, the fast model handles volume, and Groq's 1200+ tokens-per-second inference keeps the whole process near real time. Output renders as clean Markdown with support for tables and code blocks, and finished notes download as text or PDF. Model selection is configurable - swap in other Groq-hosted open models like Mixtral or Gemma to trade speed against quality or work around rate limits. Built as a single Streamlit app by Benjamin Klieger at Groq, it needs only a Groq API key to run, making it one of the simplest self-hosted AI tools to operate.

Capture a thought before it evaporates: Crumbs is a self-hosted, privacy-first alternative to Google Keep for notes you would rather keep on your own server. You write rich notes with Markdown, checklists, and image attachments, then give each one a personality from twelve color themes. Hashtags organize everything without folders, pinning keeps the important notes on top, and archive and trash clear the rest out of sight. Full-text search reaches across titles, content, and tags, so last month's idea is one query away. Every note keeps a version history you can browse and restore, which turns accidental deletions and bad edits into non-events. Notes can be shared with other users on your instance, with optional email notifications over SMTP for share alerts and account events. The installable PWA works offline through IndexedDB with last-write-wins CRDT sync, so a note captured on a plane reconciles when you land. Accounts are protected with Argon2 password hashing, and Google, GitHub, or any OIDC provider can handle sign-in instead. A built-in MCP server even lets AI assistants manage your notes on your behalf. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Written in optimized C++ where competitors use Python or Java, NZBGet saturates fast connections while idling on CPU and RAM - which is why the performance-obsessed Usenet downloader has long been the client of choice for NAS boxes, Raspberry Pis, and routers as much as full servers. The engineering shows in the recovery pipeline. Instead of shelling out to par2cmdline, NZBGet integrates the par2 source directly and exploits its knowledge of exactly which articles failed - quick par-verification checks only what needs checking, and its own multicore repair implementation runs 2-3x faster than the external tool on the same hardware. Fast par-rename deobfuscates scrambled filenames in seconds without a full verification pass, and rar-rename recovers names for multivolume archives even when no par2 files exist. DirectWrite assembles articles straight into sparse destination files, skipping temporary-file churn entirely, with an article cache and queue-pausing options to eliminate disk contention. Automation is complete: a remote web interface, full JSON-RPC API, RSS feeds with duplicate detection, scheduling and prioritization, and an extension manager for Python and Bash scripts triggered by download events. Sonarr, Radarr, and every major indexer integrate natively.

Usulnet packs container management, Trivy security scanning, Nginx reverse proxy, scheduled backups, WireGuard VPN, firewall rules, and multi-node orchestration into a single 70MB Go binary with zero external runtime dependencies. Every module ships in one download with no paid tiers, no telemetry, and no edition gating. Container lifecycle management covers creation, start, stop, restart, pause, kill, and removal with bulk operations, real-time resource statistics, filesystem browsing, and settings editing. Trivy integration scans images and running containers for CVEs with severity scoring, generates SBOMs, and validates CIS benchmarks. The multi-node architecture supports standalone, master, or agent modes where agents connect over NATS JetStream with mTLS encryption, enabling remote Docker host management from a central dashboard. Reverse proxy configuration handles Nginx with automatic Let's Encrypt certificates, TCP/UDP stream proxying, access lists, and dead host detection. Backup operations capture container volumes and Compose stacks on configurable schedules with retention policies and full restore capabilities. A built-in application catalog provides 60+ one-click templates for common services. JWT license validation uses an RSA-4096 public key embedded in the binary, requiring no call-home and working entirely offline. For teams tired of maintaining separate tools for each infrastructure concern, Usulnet collapses the entire stack into a single point of management with Docker Compose deployment alongside PostgreSQL, Redis, and NATS.

100% portability is Nanote's one non-negotiable principle as a self-hosted note-taking app. There is no database - notebooks are plain folders and notes are plain Markdown files on your filesystem, so the same notes remain fully manageable from a terminal, Notepad, or any other editor, and walking away from Nanote costs nothing because your data was never in a proprietary format to begin with. Built with Nuxt and TypeScript around the Milkdown editor, it layers modern conveniences on that plain-file foundation: fast content search across all notes using OS-optimized tooling (ugrep), native Markdown rendering, image and file attachments, and a mobile-friendly layout for reading and editing on a phone. Clever remark directives make plain text interactive - typing ::file inserts an inline upload picker, while ::today, ::now, and ::tomorrow expand to live dates and times. A fully typed REST API with validation covers automation, and access is protected by a configurable secret key. Deployment is one container with three env vars: paths for notes, uploads, and config, all bind-mountable so your Markdown lives wherever you want it - including inside an existing sync setup. AGPL-licensed and actively daily-driven by its author.

Keep your newsletter audience on infrastructure you own with LetterSpace, a self-hosted platform for subscriber lists, campaigns, and email analytics. Organize subscribers into lists inside your organization, enrich each address with metadata pairs, and use those values as placeholders inside the mail you send. Campaigns begin as drafts where subject, content, template, target lists, and tracking choices stay editable until you deliberately start the send. A test copy goes to your own inbox first, and a future schedule time holds the campaign until the moment arrives. Reusable HTML templates wrap every campaign in your house style, with the content injected at send time and an unsubscribe link in the footer. Once mail flows, the dashboard follows subscriber growth across six months, recent campaign delivery rates, and open and click performance compared between the last thirty days and the period before. Delivery itself runs through your SMTP settings with per-organization rate limits, retries, and concurrency controls, and provider webhooks can report bounces and confirmations back into message statuses. Signup forms and external tools connect through a REST API guarded by keys, with double opt-in available for new subscribers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"Somewhat lightweight, low-friction" is how Silicon Notes' author describes the personal knowledge base - written after DokuWiki's editor "drove me mad" and no existing wiki quite fit. The philosophy is that small frequent annoyances compound into cognitive load with no return, so everything here is optimized for frictionless daily use. Notes are written in plaintext Markdown and rendered as clean HTML with Pygments syntax highlighting for code blocks; pages get bi-directional relationships (backlinks), so the knowledge base becomes a connected web rather than a folder tree; and full-text plus title search retrieves anything fast. A table of contents lives in the left sidebar - "where it belongs" - editable while you read without scrolling away. Page history tracks revisions for auditing and rollback, JSON export/import keeps everything portable, and the mobile layout is genuinely usable. The stack is deliberately minimal: Python and Flask with Mistune for Markdown and SQLite for storage - no big frameworks, just a few small dependencies. One honest caveat: there is no built-in authentication, so deploy it behind a VPN, private network, or reverse-proxy auth layer. For a solo engineer's brain, it is exactly enough.

With 3,900 GitHub stars, 140 contributors, and 380 releases since its 2022 launch, Grafana OnCall delivers developer-friendly incident response that routes alerts from any monitoring system to the right engineer at the right time through the right channel. The platform accepts alerts via unique API URLs from Alertmanager, Grafana Alerting, Zabbix, Datadog, Pagerduty-compatible sources, Jira, inbound email, and generic HTTP webhooks, then applies routing templates to direct each alert to the appropriate escalation chain. Escalation chains define notification sequences — notify the primary on-call via Slack, wait 5 minutes, escalate to SMS and phone, wait 10 minutes, page the secondary on-call and notify the engineering manager — continuing until acknowledgment or resolution. On-call schedules support multi-layer rotations with overrides, shift swaps, and timezone-aware handoffs rendered directly inside Grafana dashboards. ChatOps integration publishes alert groups to Slack channels and Telegram groups with interactive buttons for acknowledge, resolve, and silence actions. Template engines based on Jinja2 control alert grouping, appearance rendering, and behavioral automation. The REST API enables programmatic management of integrations, schedules, and escalation policies. Deploy via Docker Compose with PostgreSQL, Redis, and Celery workers alongside your existing Grafana instance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3 licensed.