AgenTerm lets your AI agent work inside a remote computer's terminal with the owner's permission, through a relay server you host yourself. Your agent connects to the server over MCP and creates an invitation, single-use and expiring in fifteen minutes by default, or reusable across several devices; you privately share the generated connection command with the person who needs help. That person runs a small client on macOS, Linux, or Windows, reads what access means, and authorizes it; the client then dials out to your server, so the target computer needs no SSH service and no open inbound port. The agent can then run one-off commands with a chosen working directory, environment overrides, and timeouts, receiving stdout, stderr, and exit status, or hold an interactive session open, reading output as it arrives and typing answers to prompts. The person at the keyboard watches every command and its output in the client and can disconnect at any moment, and the client reconnects by itself after a network drop. Use it to troubleshoot a colleague's machine without swapping logs, help family through a terminal problem, or drive a development box with no agent or model account of its own. The relay itself is a single Go binary guarded by a management key, deployed with Docker Compose or systemd, with in-memory sessions and a health endpoint. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

asciinema server gives terminal recordings and live streams a home on your own domain, stored as lightweight, searchable text instead of heavy video files. Demos, tutorials, and incident replays recorded with the asciinema CLI upload in the asciicast format and play back in an integrated web player with configurable terminal themes and font families. Live streams broadcast a running session to viewers in their browsers, which suits workshops, pair debugging, and open office hours. Search spans titles, descriptions, and the terminal output itself, so a command typed months ago is easy to find. Every recording or stream is private, unlisted, or public, secret links make sharing simple, and titles and Markdown descriptions stay editable after upload. Players embed in documentation pages, an SVG preview image links back to the recording, and transcripts download as plain .txt files. No tracking, no advertising. Sign-in uses emailed login links, which a single-user instance can read straight from the server log. An HTTP API creates, updates, and deletes recordings and streams, and an optional audio track can accompany either one. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Meeting-app screen sharing was built for slide decks, and it shows when two engineers chase a bug across a codebase together; Hopp rebuilds screen sharing for exactly that job. Click a teammate and their screen opens in under a second: no meeting links, no calendar invites, no "can you see my screen?" ritual. Both sides get real keyboard and mouse control with sub-100ms latency, so guests type, click, and navigate instead of dictating instructions. Rooms hold up to 10 people for mob programming, code reviews, and onboarding, all with shared cursors so everyone can point at the line they mean. When words fail, draw or type annotations directly on the shared screen. The stream defaults to 4K, so small fonts and subtle diffs stay readable, and noise-cancelling audio keeps voices clear with no separate call app. You share any application, not just a browser tab, so debugging in Grafana or reviewing a design works as well as editing code. App Veil hides the windows you pick, such as password managers or chat, from the shared screen. Slack starts sessions with one /hopp command, and custom keyboard shortcuts keep frequent actions in flow. The server is yours: a Docker Compose stack with PostgreSQL, Redis, LiveKit, and Caddy auto-TLS serves the web dashboard and media, and the desktop app points at your backend, not a vendor cloud. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 10,000 GitHub stars and a reputation forged in the frustration of laggy corporate screen sharing, Screego delivers what Microsoft Teams and Zoom screen share consistently fail to provide: instant, high-resolution screen streaming that lets remote colleagues actually read your code. Built on WebRTC peer-to-peer connections, Screego transmits screen data directly between browsers without routing through centralized servers, achieving sub-second latency and native-resolution quality that makes pair programming and code reviews genuinely productive. The server component, written in Go with a TypeScript frontend, deploys as a single binary or Docker container with minimal configuration — set your external URL, generate a secret key, and you're live. An integrated TURN server handles NAT traversal automatically, eliminating the need for separate STUN/TURN infrastructure, with configurable UDP port ranges and support for external TURN servers when scaling beyond a single instance. Authentication supports three modes — requiring login for all actions, only for TURN connections, or none — with user management via simple credential files. Rooms are created instantly and support multiple simultaneous viewers, with system and tab audio sharing available for demonstrations that need sound. The architecture supports reverse proxy deployment behind Nginx, Caddy, or Apache with automatic TLS termination, and recent releases added riscv64 architecture support alongside existing amd64 and arm64 builds. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

A self-hosted front door for apps that live on home labs, office LANs, and private clusters, Wiredoor publishes them to the internet without opening a single inbound port on the private side. The Wiredoor CLI on each remote machine dials out to the server over an encrypted WireGuard tunnel. Web apps and APIs are routed by domain and path, WebSocket traffic included, while TCP and UDP services such as SSH or Redis get a public port of their own. Public domains receive Let's Encrypt certificates, internal names fall back to self-signed ones, and Cloudflare or GoDaddy credentials let the server create DNS records itself. Any web route can demand OAuth2 sign-in with an email allow list and a few open paths, and every protocol accepts IP allow lists. Gateway nodes stretch one tunnel across a Docker network, Kubernetes cluster, or private subnet, so a single link serves many backends. Services can be switched off or given an expiry such as 30 minutes, 2 hours, or 1 day. The dashboard shows which nodes are connected and whether their services are enabled, while the CLI creates, enables, and disables services from a terminal. Optional Prometheus and Grafana views chart traffic and tunnel peers, and CrowdSec can block abusive addresses. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

zrok puts services that live behind NAT and firewalls onto the public internet with a shareable URL, without opening a single inbound port. The machine being shared dials out to an OpenZiti overlay network, so a web app on your desk, a Raspberry Pi at home, or a staging box inside a corporate network becomes reachable through your instance while its firewall stays closed. One command shares an HTTP service publicly; add a name from one of your namespaces and the URL stays stable even when you move the backend to a different machine, and an ephemeral name can be promoted to a reserved one when a quick demo turns into a keeper. Private shares skip the public internet entirely and reach only the users you grant, including raw TCP and UDP services, while web and drive backend modes publish static sites or whole folders, with OAuth, password auth, and an interstitial warning page available on public shares. The long-running agent keeps every share and access under one process, restarts the named ones after a reboot, and offers a localhost console for point-and-click sharing; the account-wide web console maps your environments, shares, and accesses as a navigable graph or a sortable table with live activity. Operators get invite-based accounts, InfluxDB-backed usage metrics, and configurable limits that warn or cut off accounts that exceed their quotas. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Rustunnel turns a service running on your laptop or private network into a public HTTPS, TCP, or UDP endpoint without opening inbound ports on the machine where it lives. Point the client at a local port and share the public address for webhook testing, a quick demo, an AI agent tool, SSH access, a game server, or an IoT device that cannot accept inbound connections. Give tunnels custom subdomains on your own wildcard domain, terminate HTTPS with automatic Let's Encrypt certificates, and keep client traffic encrypted from edge to local service. Put several backends behind one subdomain or TCP port and let TCP or HTTP health probes remove sick members before visitors hit them. When two peers can reach each other directly, start a P2P tunnel with NAT hole punching and QUIC, with relay fallback when the direct path fails. Watch sessions, tunnel health, traffic, and request logs from the live dashboard, inspect headers and bodies in the local request inspector, and replay a captured call while debugging a webhook. Manage tunnels, tokens, groups, captured requests, and history through the REST API, scrape Prometheus metrics, review audit logs, or let an MCP-compatible coding assistant create and close tunnels in plain language. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Gately keeps your domain names current, forwards ports, terminates HTTPS, and blocks hostile traffic from one admin console, so a server or home network needs no pile of separate gateway tools. Dynamic DNS updates records at Cloudflare, Alibaba Cloud, Tencent Cloud, DNSPod, Huawei Cloud, Route 53, OVHcloud, Gandi, Namecheap, DuckDNS, and other providers, finding the public address over IPv4 or IPv6 by URL, network interface, or command. Port forwarding relays TCP and UDP with port ranges, failover targets, connection limits, traffic statistics, and PROXY protocol, while SNI routing lets several services share port 443. Certificates are issued and renewed through ACME with DNS-01 wildcards or HTTP-01, then pushed to other hosts over SSH. Web services add per-domain reverse proxies, redirects, and static sites with HTTP/3, WebSocket, load balancing, health checks, rate limiting, caching, and sign-in through OIDC, GitHub, Google, or TOTP-protected shared users. A WAF running the OWASP Core Rule Set and fail2ban-style jails with trap ports and nftables bans guard the edge. Manage Docker containers and Compose projects with one-click upgrades and rollback, open SSH sessions with an SFTP file manager, run ping, traceroute, and speed tests, and receive alerts in Telegram, Discord, Slack, ntfy, or email. An audit log, config history with diff and rollback, encrypted backups, scoped API tokens, and Prometheus metrics round it out. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Created to eliminate the configuration fragmentation plaguing multi-device Homelab setups and small-team infrastructures, NetsGo merges what typically requires three separate tools — a tunnel daemon, a management panel, and a monitoring stack — into a single Go binary that starts with one command and listens on one port. The server exposes HTTP, TCP, and UDP tunnels, a built-in Web console for node management, a REST API for automation, and real-time traffic statistics with per-client bandwidth limiting, all sharing default port 9527 so firewalls and reverse proxies need only a single rule. Version 0.1.11 introduced Client-to-Client P2P tunnels via WebRTC DataChannel with three selectable transport strategies — Server relay, Prefer P2P with automatic fallback, and P2P only — reducing latency for direct connections while maintaining the centralized control plane. The management console displays every connected client's online status, authentication tokens, tunnel configuration, active transport mode, P2P candidate gathering progress, and cumulative byte-level traffic counters updated every second. Unlike frp or rathole which delegate management to external plugins or configuration files, NetsGo provides built-in client key generation, tunnel target migration between nodes, SOCKS5 proxying, IP-whitelist console access, and one-command server upgrades. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Every server, embedded board, and edge gateway you manage becomes reachable through one SSH address in ShellHub, even when it sits behind NAT with no public IP and no open inbound port. A small agent on each device dials out to your server, so a box on a customer LAN or a cellular link needs nothing beyond outbound web access. Connect with the stock ssh client by typing [email protected]@server, or open a terminal in the browser, and scp, sftp, rsync, and port forwarding work unchanged. SSH identities tie every key to a named team member, so removing someone ends their access on every device at once. Default-deny access policies grant or block members, roles, users, or API keys by device tag, Linux login, and source address, and can require a fresh browser confirmation before a session opens. Provisioning keys enroll whole fleets through automatic, manual, webhook, or allowlist acceptance, with usage limits, expiry dates, and tags. The Sessions page records who connected to which device, as which login, and from where, and browser terminals can be recorded and replayed. A Docker connector turns containers into devices that policies can grant one by one. Four member roles shape what each person can change, and the HTTP API, API keys, and an MCP server let scripts and AI assistants list devices and review sessions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Termix delivers a unified, self-hosted infrastructure control center that consolidates SSH terminals, remote desktop streaming, and fleet automation into an intuitive browser workspace that replaces proprietary tools like Termius. Administrators connect to Linux servers and desktop environments using embedded RDP, VNC, and Telnet protocols powered by Apache Guacamole without requiring local client installations. The multi-panel terminal interface supports four-way split screens, allowing operators to broadcast keystrokes simultaneously across multiple production hosts or execute saved reusable script snippets with dynamic parameters. Real-time multiplayer session sharing lets engineers invite teammates via secure, time-limited links with configurable read-only or collaborative write permissions for troubleshooting incidents. Advanced networking layers handle SSH jump hosts, SOCKS5 proxy chains, Warpgate relays, and port knocking sequences to access segmented private networks securely. Integrated SFTP file managers provide drag-and-drop file transfers with editable path bars, inline text editing, and folder synchronization across remote machines. Background telemetry monitors CPU loads, memory utilization, disk IOPS, and container statuses, while built-in session recording captures complete terminal sessions for compliance auditing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Terminals, remote desktops, and file browsers for every server you run: Nexterm opens them over SSH, VNC, RDP, Telnet, or SFTP from a self-hosted web page. Servers live in folders with tags and custom icons. Connections open as tabs or split views, keep running across browsers and devices, and can hibernate and resume later. The file manager handles SFTP and FTP: drag files in, upload whole folders, search, and edit in place with syntax highlighting. Live metrics track CPU, memory, disk, network, and processes for each host. Snippets store the commands you retype most. Scripts run whole maintenance jobs. Git repositories added as sources bring ready-made ones filtered by operating system. Organizations share servers through role-based permissions, and every action is logged. Record full terminal sessions for audits and training, or send a shared-session link so a colleague can join, read-only or writable. Authentication covers local accounts with TOTP and passkeys, OIDC providers such as Keycloak, Authentik, and Microsoft Entra ID, and LDAP or Active Directory. Saved passwords, SSH keys, and passphrases stay encrypted at rest. A Proxmox integration lists LXC containers and QEMU virtual machines and can start or stop them. An opt-in AI assistant drafts shell commands from plain-language requests. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Ovis puts every coding agent running on your machine into your pocket, turning Claude Code, Codex, and a dozen other agent panes into clean phone-friendly chats you can read, answer, and steer from anywhere. Each pane shows the agent's own transcript as a conversation instead of terminal scrollback, with the live terminal one tap away when you need raw output. Permission requests, questions, and plan menus arrive as cards you answer with a tap or a number, and Ovis checks the prompt is still current before sending your answer. Live status for every pane shows which agents are working, which finished, and which are waiting on you. Web push alerts reach you even with the app closed, so a blocked agent never sits idle while you are away from the desk. Install it on your phone as a PWA with a rearrangeable key bar for Esc, Tab, Ctrl, and arrow keys, paired by QR code to your Tailscale address. Dictate replies into chat or terminal with mixed Korean and English speech, review the transcript, then send it to the agent. Open working-tree, staged, or commit comparisons from the file browser and read each file's diff without touching the repository. Reach remote PCs over SSH, queue a message for the agent's next turn, or send it immediately. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 78,000 GitHub stars, 270 contributors, and seven years of continuous development tracking upstream VS Code releases within days, code-server has become the definitive way to run a full Visual Studio Code IDE on any remote machine and access it from any browser on any device. The project applies a curated set of patches to Microsoft's VS Code codebase that add password authentication, sub-path hosting behind reverse proxies, self-contained web views that never call out to Microsoft servers, a built-in proxy for accessing ports on the remote machine directly through the VS Code ports panel, and on-disk settings persistence instead of browser storage. The extension ecosystem works with the Open VSX marketplace by default, giving access to thousands of extensions for Python, JavaScript, Go, Rust, Java, and every other language, along with themes, linters, formatters, and debuggers. The integrated terminal provides direct shell access to the server, Git integration handles version control without leaving the editor, and the debugger supports breakpoints, variable inspection, and step-through execution for Node.js, Python, Go, and other runtimes. DevContainer support enables reproducible development environments defined in JSON configuration files. Installation options include a one-line install script, manual package installation, Docker via the official codercom/code-server image, and DevContainer features. Minimum requirements are a Linux machine with 1GB RAM, 2 vCPUs, and WebSocket support. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Eclipse Che spins up complete development environments on Kubernetes from a Devfile in the project repository, so new developers click a factory link and open a browser IDE with dependencies, runtimes, and debugging already configured instead of spending their first day installing toolchains. Each workspace runs as a DevWorkspace custom resource in the user's namespace, making environments API-manageable with kubectl and GitOps tooling alike. Developers choose their editor per workspace, from Visual Studio Code Open Source to JetBrains IDEs via Projector, and the 7.124 release adds Orca, an agent development environment for working alongside AI coding agents. Workspaces carry their own containers for build and run, so code executes in a production-like environment with direct Kubernetes API access from the IDE. Teams standardize stacks as Devfile templates, onboard contributors in minutes, and open a fresh workspace per branch or pull request in a new browser tab. The 7.124 release also builds workspace lifecycle commands into chectl, including SSH connections with port forwarding to desktop editors, and DevWorkspace Operator 1.0 adds optional per-workspace NetworkPolicy isolation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EPL-2.0 licensed.

Alma Relay is the relay you run yourself so your phone can reach the Alma on your desktop from anywhere, without port forwarding, a VPN, or a third party sitting in between. Your desktop dials out to the relay and keeps that connection open, and when you open the app on your phone, its requests travel through the relay to the desktop and the answers stream back the same way. Pairing happens with a QR code that carries the relay address, so switching to your own relay takes one fresh scan instead of manual setup on every device. New pairings encrypt the session end to end, so the relay routes encrypted traffic it cannot read, and the routing values it handles are one-way hashes that are never written to disk or logs. When your phone is locked, the relay can pass along the "reply finished" and "Alma has a question" notifications through Apple's or Google's push services, so you hear about finished work without staring at the screen. A live view of the desktop's browser can ride along too, with short-lived credentials issued for the media connection. Sharing the relay with a team works through per-person tokens you can revoke individually, and regenerating your connect code cuts off every paired phone at once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.