Close the laptop, walk away, and your coding agents keep working; CodeRail is the remote control that lets you supervise them from a browser or your phone without handing your machines to anyone's cloud. A small bridge on each computer connects outbound to your server, so there are no open ports and no VPN to babysit, and each machine keeps its own Claude Code and Codex logins because CodeRail never holds your AI keys. Chats show plans, tool calls, models, modes, and background tasks, and when an agent wants to run something sensitive, the approval lands with you wherever you are, including as a phone push notification. Real terminals outlive the browser tab, files can be viewed, edited, uploaded, and downloaded in place, and git work, pull requests included, sits beside the conversation that produced it. Each chat even gets a browser on the computer itself, shared live with everyone in the chat and drivable by the agent. Roles run Owner, Operator, or Viewer per computer, narrowed down to folders and agents, with every change audited, and sessions keep running with every browser closed while history stays readable offline. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Ovis puts every coding agent running on your machine into your pocket, turning Claude Code, Codex, and a dozen other agent panes into clean phone-friendly chats you can read, answer, and steer from anywhere. Each pane shows the agent's own transcript as a conversation instead of terminal scrollback, with the live terminal one tap away when you need raw output. Permission requests, questions, and plan menus arrive as cards you answer with a tap or a number, and Ovis checks the prompt is still current before sending your answer. Live status for every pane shows which agents are working, which finished, and which are waiting on you. Web push alerts reach you even with the app closed, so a blocked agent never sits idle while you are away from the desk. Install it on your phone as a PWA with a rearrangeable key bar for Esc, Tab, Ctrl, and arrow keys, paired by QR code to your Tailscale address. Dictate replies into chat or terminal with mixed Korean and English speech, review the transcript, then send it to the agent. Open working-tree, staged, or commit comparisons from the file browser and read each file's diff without touching the repository. Reach remote PCs over SSH, queue a message for the agent's next turn, or send it immediately. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Shell Online lets a terminal session running on your own computer follow you to any browser, so your coding agent keeps working while you are away from your desk. Prefix the command you already run, such as shell claude, shell codex, or shell opencode, and your terminal prints a link, a password, and a QR code that open the same live session on a phone, tablet, or another computer. You watch output as it happens and reply to prompts from wherever you are, and closing the browser leaves the process running until it exits on its own. Inviting a teammate takes the same link: share it read-only so they can watch without typing, or let them type into the session with you. Terminal traffic is end-to-end encrypted by default, file access stays off until you deliberately expose a chosen directory, and a scoped MCP grant can let another agent inspect or steer a session for a limited time. With an account, linked machines and their sessions gather in one web app with team sharing. The relay the sessions pass through can run on your own server with the standalone Docker deployment, pointed at by the unchanged CLI. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Close the laptop, keep the agents: Roamgate brings the Herdr workspace running on your server into any browser, so the terminal session you left mid-task is waiting on your phone exactly as you left it. Every workspace and recognized agent sits in one view: check what each agent is doing, read its conversation, and take over a real terminal with streaming output, split panes, scrollback, multiline paste, and clickable links. When the agent finishes, the review happens in the same place: inspect staged, unstaged, untracked, and branch changes, annotate exact diff lines, preview rendered Markdown, and send compiled feedback back into the agent pane without pre-filling a submission you did not approve. Files browse beside the terminals, and session history survives disconnects because Herdr owns the sessions, not your browser tab. Connections stay flexible: run the bridge beside Herdr on one machine, save SSH profiles to reach remote hosts, and install the whole thing as a PWA for an app window without tabs. Login is required even on loopback, push notifications flag agents waiting for input, and themes, accents, and terminal fonts make the cockpit yours. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Termix delivers a unified, self-hosted infrastructure control center that consolidates SSH terminals, remote desktop streaming, and fleet automation into an intuitive browser workspace that replaces proprietary tools like Termius. Administrators connect to Linux servers and desktop environments using embedded RDP, VNC, and Telnet protocols powered by Apache Guacamole without requiring local client installations. The multi-panel terminal interface supports four-way split screens, allowing operators to broadcast keystrokes simultaneously across multiple production hosts or execute saved reusable script snippets with dynamic parameters. Real-time multiplayer session sharing lets engineers invite teammates via secure, time-limited links with configurable read-only or collaborative write permissions for troubleshooting incidents. Advanced networking layers handle SSH jump hosts, SOCKS5 proxy chains, Warpgate relays, and port knocking sequences to access segmented private networks securely. Integrated SFTP file managers provide drag-and-drop file transfers with editable path bars, inline text editing, and folder synchronization across remote machines. Background telemetry monitors CPU loads, memory utilization, disk IOPS, and container statuses, while built-in session recording captures complete terminal sessions for compliance auditing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Codync turns the coding agents already installed on your computer into named bots you can message from your phone, so the Claude Code or Codex session on your desk keeps working while you are away. Each bot wraps one agent in one project folder, with its own standing instructions, memory, and approval rules, and several bots run side by side on one machine. Message any bot from the iPhone app, the desktop app, or a terminal; group rooms put bots in one thread, and an @name mention routes a question to exactly one of them. Bots ask each other for reviews inside the room and quote-reply to specific messages. File changes arrive as approval cards naming the file and computer, with Allow once, Always allow, or Deny; finished and blocked work both ping you as push notifications. The connection between phone and computer is end-to-end encrypted through a free relay, your own relay, or directly over the same Wi-Fi or Tailscale. Watch the computer's screen from your phone, hand a bot a computer-use tool, or talk to it in a voice call, and approve every new device per computer with a six-digit code. Your existing agent subscription does the work; Codync never calls a provider API with your login, and there is no paid tier. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

AgenTerm lets your AI agent work inside a remote computer's terminal with the owner's permission, through a relay server you host yourself. Your agent connects to the server over MCP and creates an invitation, single-use and expiring in fifteen minutes by default, or reusable across several devices; you privately share the generated connection command with the person who needs help. That person runs a small client on macOS, Linux, or Windows, reads what access means, and authorizes it; the client then dials out to your server, so the target computer needs no SSH service and no open inbound port. The agent can then run one-off commands with a chosen working directory, environment overrides, and timeouts, receiving stdout, stderr, and exit status, or hold an interactive session open, reading output as it arrives and typing answers to prompts. The person at the keyboard watches every command and its output in the client and can disconnect at any moment, and the client reconnects by itself after a network drop. Use it to troubleshoot a colleague's machine without swapping logs, help family through a terminal problem, or drive a development box with no agent or model account of its own. The relay itself is a single Go binary guarded by a management key, deployed with Docker Compose or systemd, with in-memory sessions and a health endpoint. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Skiff is a self-hosted SSH manager that remembers every command you ran on your servers and exactly what it printed, so the fix you found at 2 a.m. last March takes seconds to find again. Open a host's history beside its terminal, or search commands and captured output across every host, filter to just the failed attempts, and expand an entry to see its full output. When you edit a small text file, Skiff reads it over SFTP and keeps the before-and-after diff and both versions, so you can see what changed instead of guessing. Useful entries pin to a host's notes, save as reusable snippets, or go back into the terminal with Run again, where you review and press Enter yourself. The browser is only a viewer: sessions live in the Skiff server process, so closing a tab or losing Wi-Fi does not kill your work, and you reattach with recent scrollback intact. Hosts organize into nested folders with favorites and full-text search, existing SSH configs import in one paste, and host keys pin on first connect with a loud warning if one ever changes. Credentials sit in an encrypted vault that locks itself after an idle timeout, team mode shares one vault with per-user logins, and there is no cloud account, telemetry, or agent to install on any target server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Pi Web is a browser interface for the Pi coding agent ecosystem, providing a visual workspace that reads the same local configuration and session files as the CLI. The session workspace groups conversations by project with running state indicators, context usage percentages, cost tracking, and compaction details, while two branching modes let users create independent session files from earlier messages or fork branches within existing sessions to explore alternative coding directions. Real-time streaming via Server-Sent Events delivers agent responses with structured Markdown rendering, thinking steps, tool call visualization, and image drag-and-drop input. The project file explorer browses working directories with syntax-highlighted source preview, Git diff inspection, and rendering for Markdown, images, audio, PDFs, and DOCX files with automatic refresh. Git worktree support switches checkouts from the sidebar while keeping sessions from the same repository grouped together. The Models panel manages provider authentication via OAuth and API keys, model selection, model smoke tests, and models.json configuration shared bidirectionally with the CLI agent. The Skills panel lists, searches, installs, and toggles agent skills without terminal access. The interface ships with English and Simplified Chinese translations, light and dark themes, a chat minimap, keyboard shortcuts, and completion sounds. Basic Auth protects remote access when binding to non-loopback addresses. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pi Pocket puts the Pi coding agent in your phone browser, so you can start, steer, and review real coding sessions from anywhere while the work stays on your own server. Open a folder, a fresh Git worktree, or a GitHub repository, pick a model per session, and watch streamed replies with tool calls, queued follow ups, and a stop button when a run wanders. Sessions survive crashes and restarts because every model call, tool call, and subagent step is stored as it happens, and forks let you retry any reply with a different model on another branch. Invite teammates into a live session with presence, roles, and a side chat the agent never sees, or let PiP, the built in assistant, follow your other sessions and report back. GitHub watches and webhooks wake the agent when pull requests, issues, or workflows change, while scheduled messages and cron style goals keep routine work moving overnight. Spend views show cost per person and per session, and owner set limits pause new work instead of quietly burning budget. On a phone you get push notifications, dictation, share sheet intake, and a home screen app, and live reloadable extensions add routes, modules, and commands without a build step. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every server, embedded board, and edge gateway you manage becomes reachable through one SSH address in ShellHub, even when it sits behind NAT with no public IP and no open inbound port. A small agent on each device dials out to your server, so a box on a customer LAN or a cellular link needs nothing beyond outbound web access. Connect with the stock ssh client by typing [email protected]@server, or open a terminal in the browser, and scp, sftp, rsync, and port forwarding work unchanged. SSH identities tie every key to a named team member, so removing someone ends their access on every device at once. Default-deny access policies grant or block members, roles, users, or API keys by device tag, Linux login, and source address, and can require a fresh browser confirmation before a session opens. Provisioning keys enroll whole fleets through automatic, manual, webhook, or allowlist acceptance, with usage limits, expiry dates, and tags. The Sessions page records who connected to which device, as which login, and from where, and browser terminals can be recorded and replayed. A Docker connector turns containers into devices that policies can grant one by one. Four member roles shape what each person can change, and the HTTP API, API keys, and an MCP server let scripts and AI assistants list devices and review sessions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Point your RustDesk clients at CortenDesk and the bare open-source server turns into a managed fleet console with a real address book, real access control, and a remote client that lives in the browser. One container runs the ID server, the relay, and the console together, and existing key pairs and device IDs move in unchanged, so migration is a hostname change rather than a rebuild. The fleet view shows live presence, platform, aliases, owners, and last-seen for every machine, organized into folders that double as the unit of access control. People see only their own devices plus the groups granted to them, and the same scoping is enforced in the RustDesk client API, not just the web pages. Policies push client settings over the heartbeat, covering permissions, password rules, and capture behavior, and enforced policies revert local changes automatically. Five audit logs record connections, file transfers, sign-ins, security alarms, and console actions, all filterable and exportable to CSV. When a browser is all you have, the built-in web client views and controls machines with file transfer, clipboard, audio, and multi-monitor switching, no installer required. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 7,000 GitHub stars and continuous development since 2017 by former Intel engineer Ylian Saint-Hilaire, MeshCentral has become the go-to self-hosted alternative to ConnectWise Control and Splashtop for managing devices remotely without per-seat licensing fees. The Node.js server installs via a single npm command and manages Windows, macOS, Linux, and FreeBSD endpoints through lightweight agents that maintain persistent WebSocket connections for real-time remote desktop, terminal access, and file transfer directly in the browser. Intel AMT integration provides out-of-band hardware management including power control and BIOS access even when the operating system is unresponsive. Device groups organize endpoints by location, customer, or function with granular role-based access control for multi-technician environments. Session recording captures remote desktop interactions for compliance auditing, while Wake-on-LAN powers on machines remotely across subnets. The server supports MongoDB for production deployments handling thousands of agents or the embedded NeDB for smaller setups under 200 devices, with a single 8GB VPS comfortably managing 1,500 concurrent agents. Security features include mandatory TLS with automatic Let's Encrypt certificate provisioning, multi-factor authentication via TOTP and FIDO2, SAML-based single sign-on, IP filtering, and HashiCorp Vault integration for secrets management. The web console provides real-time device monitoring with hardware and software inventory, network topology visualization, and customizable branding. TacticalRMM uses MeshCentral as its remote access layer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Helping someone fix their computer should not start with a phone call full of instructions nobody can follow: ControlR puts every machine you look after into one browser tab. Install the agent on Windows, Mac, or Linux machines once, and they appear in your device grid with their status ready for action. Open a remote desktop session and see and control the screen as if you were sitting there, drop into a cross-platform PowerShell terminal when a fix is faster typed than clicked, browse the file system to fetch a log or drop off a file, or just open chat when a quick question is all that is needed. Devices are organized with tags, and access follows them: a technician sees the machines their tags cover, while roles decide who can install agents, manage installer keys, administer the tenant, or reach every device. Agent logs stream to the server in real time, which turns bug reports into something you can actually read. Run one tenant for your own fleet, or enable public registration and let each new account become its own isolated tenant, with the database keeping every tenant's devices and users apart. Sensitive settings can arrive through Docker Secrets instead of environment variables, and the whole server runs from a single compose file. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Breeze is an open-source RMM and PSA platform for MSPs that watches every managed device, and its built-in AI operator investigates alerts and drafts fixes for your approval. See live CPU, memory, disk, and network health for the whole fleet, with hardware and software inventory on every Windows, macOS, and Linux endpoint. Approve and deploy operating system and application patches in rings and maintenance windows, or push scripts and software to hundreds of devices at once. Open a remote terminal, browse files, or take over the desktop with multi-display support when a user needs hands-on help. Network discovery scans each site for unmanaged devices, while configuration policies and drift checks keep machines aligned with your baseline. Tickets, time entries, quotes, and invoices live beside the device work, so a resolved issue becomes a billable record without a second system. Clients get their own portal to raise requests and follow progress, and the multi-tenant structure keeps every customer separate from day one. When the AI operator acts, tiered approvals and a full audit log show exactly what it did and who allowed it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 10,000 GitHub stars and a reputation forged in the frustration of laggy corporate screen sharing, Screego delivers what Microsoft Teams and Zoom screen share consistently fail to provide: instant, high-resolution screen streaming that lets remote colleagues actually read your code. Built on WebRTC peer-to-peer connections, Screego transmits screen data directly between browsers without routing through centralized servers, achieving sub-second latency and native-resolution quality that makes pair programming and code reviews genuinely productive. The server component, written in Go with a TypeScript frontend, deploys as a single binary or Docker container with minimal configuration — set your external URL, generate a secret key, and you're live. An integrated TURN server handles NAT traversal automatically, eliminating the need for separate STUN/TURN infrastructure, with configurable UDP port ranges and support for external TURN servers when scaling beyond a single instance. Authentication supports three modes — requiring login for all actions, only for TURN connections, or none — with user management via simple credential files. Rooms are created instantly and support multiple simultaneous viewers, with system and tab audio sharing available for demonstrations that need sound. The architecture supports reverse proxy deployment behind Nginx, Caddy, or Apache with automatic TLS termination, and recent releases added riscv64 architecture support alongside existing amd64 and arm64 builds. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Meeting-app screen sharing was built for slide decks, and it shows when two engineers chase a bug across a codebase together; Hopp rebuilds screen sharing for exactly that job. Click a teammate and their screen opens in under a second: no meeting links, no calendar invites, no "can you see my screen?" ritual. Both sides get real keyboard and mouse control with sub-100ms latency, so guests type, click, and navigate instead of dictating instructions. Rooms hold up to 10 people for mob programming, code reviews, and onboarding, all with shared cursors so everyone can point at the line they mean. When words fail, draw or type annotations directly on the shared screen. The stream defaults to 4K, so small fonts and subtle diffs stay readable, and noise-cancelling audio keeps voices clear with no separate call app. You share any application, not just a browser tab, so debugging in Grafana or reviewing a design works as well as editing code. App Veil hides the windows you pick, such as password managers or chat, from the shared screen. Slack starts sessions with one /hopp command, and custom keyboard shortcuts keep frequent actions in flow. The server is yours: a Docker Compose stack with PostgreSQL, Redis, LiveKit, and Caddy auto-TLS serves the web dashboard and media, and the desktop app points at your backend, not a vendor cloud. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 34,000 GitHub stars and backing from a well-funded engineering team, Tailscale has fundamentally simplified how developers and system administrators think about secure networking. The client daemon establishes WireGuard tunnels directly between devices using sophisticated NAT traversal techniques, achieving direct peer-to-peer connections in the vast majority of network configurations without requiring port forwarding, firewall rules, or VPN concentrators. When direct connections prove impossible due to restrictive network environments, DERP relay servers provide encrypted fallback paths. MagicDNS assigns human-readable hostnames to every device on the network, eliminating the need to remember IP addresses across a tailnet. Subnet routing allows nodes to advertise access to entire local networks, enabling remote access to office resources, home labs, or cloud VPCs through a single gateway node. Exit node functionality routes all internet traffic through a designated device for privacy protection or geographic flexibility. Access control lists define granular policies for which devices and users can communicate with which services, enforced cryptographically at the network layer. The authentication layer integrates with identity providers including Google, Microsoft, GitHub, Apple, and OIDC-compliant systems for single sign-on access. Taildrop enables direct encrypted file transfers between devices without cloud intermediaries. The tailscale CLI provides complete network management from the terminal including status monitoring, route advertisement, and node configuration. Running Tailscale on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console provides a permanent, always-on node in your mesh network. BSD-3-Clause licensed with an active open-source community.