Clay Studio is a self-hosted workspace where your team and its coding agents share projects, live sessions, and project knowledge in one browser interface instead of scattering them across terminals. You organize several repositories in one sidebar and run sessions in parallel while teammates watch live activity, enter the same session, hand work off, and answer permission requests from wherever they are. Ten agent runtimes plug into the same workspace, Claude Code, Codex, Grok Build, Kimi Code, GitHub Copilot CLI, Qwen Code, Junie CLI, Antigravity CLI, OpenCode, and Kiro CLI, each keeping its own authentication and models. Persistent Mates give AI collaborators an identity, instructions, memory, direct messages, and roles in structured debates that survive beyond a single chat. Worktrees, paired sessions, spawned workers, scheduled tasks, and Ralph Loops let background jobs proceed without losing sight of what is running. You browse and edit files, inspect diffs and history, open terminals, install skills, connect MCP servers, and manage project knowledge without leaving the workspace. The installable PWA works on mobile and pushes notifications for approvals, failures, and finished work. Sessions and knowledge stay on your disk as portable JSONL and Markdown, so switching providers never means migrating your workspace. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0-only licensed.

AgentVerse OS turns a single Ubuntu server into a personal cloud with a real desktop in the browser, built for a developer and their AI agents. You work in a windowed desktop with a taskbar, start menu, and widgets for system monitoring, clock, news, weather, and projects, and the same desktop opens from a laptop, tablet, or phone while everything stays on the server. Each project gets an isolated Incus container with Docker inside, its own network and gate, plus VS Code, a terminal, files, and git in the browser. The Agents app runs Claude Code, Codex, Gemini CLI, pi, and Antigravity inside the workspace, with permission prompts you approve from any device, scheduled routines, model menus, conversation search and export, and a ledger of what each session spent. When you close your laptop the agents keep working, and you pick the conversation up later exactly where it stopped. A built-in store merges the Runtipi, Coolify, and Umbrel catalogs into about 945 installable apps with guided setup, credentials shown in the app card, snapshots, and rollback. Projects request capabilities such as storage.s3, llm, or notify instead of hardcoding addresses, scheduled ZFS snapshots feed a restic backup repository, and access arrives only through your Tailscale network with real certificates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Platypus gives a whole team always-on AI agents that reason, call tools, and keep working on your own servers while everyone is offline. Build an agent once by choosing a provider and model, writing its instructions, and capping its tool-calling loop, then reuse that preset across chats and scheduled runs. Agents load reusable Skills on demand and delegate specialist work to sub-agents that appear to the parent as tools. Connect local and remote data through Model Context Protocol servers, or expose an agent to outside agents and chat platforms through A2A endpoints with a token per client. Triggers run agents on a cron schedule, as one-off jobs, or when workspace events such as a card moving on a board occur, and every run records its result. Kanban boards give agents work they can move and update themselves, while notifications and HMAC-signed webhooks push board and workspace events into your own systems with filtering and retries. Facts and preferences are extracted from conversations in the background and injected into future chats, so returning users are remembered. Sandbox backends give agents shell and filesystem access inside an isolated per-workspace environment instead of the host. Organizations and workspaces keep each team's agents and data separate, and blueprints package shared agents, skills, MCP servers, and providers so a new workspace starts pre-equipped. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most AI agents are a chat box with confidence; Antares is a working security specialist that shows its evidence. Point it at a target you are authorized to test and its specialist agents map the surface, test web applications against OWASP, probe APIs, and record every confirmed finding with its reproduction steps. When the run ends, the findings are already compiled into a report, because the agent kept the evidence as it went instead of reconstructing it afterward. The same workspace handles ordinary work between engagements: it reads and writes files, runs your shell, drives a real browser, searches the web, and retrieves from a built-in memory and RAG index that remembers what matters across sessions. Give it a goal and it holds to that goal across turns, schedules its own follow-up work, and answers from Telegram and Discord when you are away from the dashboard. Bring your own models, since everything runs on your machine or server from one binary, with the dashboard, terminal UI, and API served by a single process. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

AGenUI Studio turns a written description into a working interface card: an AI agent generates the UI, binds it to your APIs and data, and packages it so it runs anywhere, no Studio required. Bring your own model by entering any OpenAI-compatible or Anthropic Messages endpoint and key in the console settings, and generation proceeds contract-first, steered by design rules you publish as versioned Markdown revisions. You preview each card live as it is generated, then refine it over multiple turns while every component, binding, and action you did not target stays protected from accidental edits. The console also manages the supporting cast: a local knowledge base, API definitions, and reusable operators, all starting from bundled demo data you can swap for real services whenever you are ready. When a card is finished, download it as a self-contained Runtime Package carrying its data sources, bindings, actions, and operators, and execute it with the bundled Card Runtime inside your own application, or register a delivery target and publish straight from the workbench over a callback or a message queue. Applications subscribe to native run events over HTTP and SSE, and production deployments can replace the local defaults piece by piece, MySQL for storage, Redis for hot state, MCP services for knowledge and data, while the packages keep the same contracts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

One self-hosted admin console runs a team of AI agents you can reach by voice, chat, webhook, or schedule. Each agent gets its own model backend, system prompt, memory, tools, and voice, with OpenAI, Anthropic, Gemini, Ollama, or any OpenAI-compatible API behind it. A visual flow editor chains agents with routers, joins, loops, parallel fan-out, templates, and small code blocks, so a question can be sorted and answered by the right specialist. Every run is recorded as a step-by-step timeline you can open and read, and conversations are browsable per client. Connect tools through the Model Context Protocol, keep long-term memory in PostgreSQL, and store API keys as secrets that models only ever see as placeholders. Voice runs on the server with wake word detection and speech models, and clients cover a voice web app, Telegram, Discord, Slack, webhooks, and cron jobs. One password-protected console manages every agent, flow, and client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Flopwire lets your AI coding agents message each other and search each other's history, so a Claude Code session on your laptop can ask the Codex session on your server what it already tried before duplicating the work. Agents see who is online and what they started on with peers, then reach each other mid-turn with send; a message arrives inside the recipient's running turn, or with its human's next prompt, and only your own live session can be woken deliberately. A device agent indexes transcripts from Claude Code, Codex, Devin CLI, and opencode within about a second; grep runs regex over every session, and search returns ranked matches naming the user, device, harness, session, and byte range each hit came from. From any full commit ID, trace finds the session that produced it and lets an agent read the conversation behind the change. The same capabilities ship as MCP tools and a messaging skill, so agents recover earlier decisions without you relaying context by hand. Secrets are redacted on the device before upload and again on the server, and path rules keep chosen repositories out of the index. One machine needs no server at all; add the team server with Docker Compose, Postgres, and any S3 compatible object store when a whole team's devices should share one searchable archive over TLS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

E2A is an open-source email API that lets any application send transactional email and gives AI agents real two-way inboxes of their own, so an assistant can hold a conversation over email without borrowing a person's mailbox. Register an agent and it gets a working address on a shared domain in seconds, or verify your own domain for branded addresses, then connect through the hosted MCP server, a coding-agent plugin with browser OAuth, signed webhooks, a WebSocket stream, REST polling, or the TypeScript and Python SDKs. A local agent behind a firewall needs no public URL at all: it listens over WebSocket and replies in-thread with conversation identifiers keeping multi-turn exchanges coherent across humans and other agents. Every inbound message arrives with structured SPF, DKIM, and DMARC evidence, with the DMARC alignment verdict included, so your agent can judge how far to trust a sender instead of trusting the From header. Flip on the human-in-the-loop gate per agent and outbound messages pause for a person to approve, edit, or reject from the dashboard, the SDK, MCP tools, or magic links in their own inbox, with expiry rules and recipient allowlists narrowing which sends get held. Inbound content screening flags prompt-injection payloads before the agent ever sees them. Support bots triage intake, scheduling agents coordinate meetings, and commerce agents answer order questions from one persistent address. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Built atop the TauricResearch TradingAgents framework with nearly 100,000 GitHub stars, TradingAgents GUI transforms a CLI-only multi-agent LLM stock analysis pipeline into a polished web application accessible at localhost:5000. The system deploys twelve specialized AI agents — fundamental analysts, sentiment experts, technical analysts, bull and bear researchers, a trader, risk management team, and portfolio manager — who collaboratively debate market conditions through structured LangGraph workflows before producing a final BUY, SELL, or HOLD recommendation. The interface supports ten LLM providers including OpenAI, Anthropic, Google, OpenRouter, DeepSeek, Ollama, xAI, Qwen, GLM, and MiniMax, with a first-run wizard that auto-detects configured API keys and tests connections. A live pipeline visualization shows each agent's status with real-time progress bars, while the tabbed output area separates Live Feed, Reports preview, and Tool calls into dedicated panes. The three-pane Reports tab provides searchable indexing, table-of-contents navigation, and export to Markdown, HTML, or PDF formats. Report length control across Concise, Standard, and Comprehensive modes saves up to 50% on token costs. Multi-session chat allows pinning past reports as grounding context with live token counting and context-window warnings. Three built-in themes — Terminal, Modern, and Bloomberg — persist per browser. Docker Compose deployment maps port 5000 with persistent report storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Watchtower puts AI-driven security assessments into one web console, where sessions probe your attack surface while every request, finding, and piece of evidence is captured as it happens. The AI session console follows the attack surface, session progress, tool calls, and findings as an assessment runs, so you can watch an engagement unfold instead of reading a log afterwards. A built-in proxy workflow records HTTP and HTTPS traffic history with highlighted patterns, and any captured request can be sent to the Repeater for editing, replay, and response comparison. Mobile work is covered too: connect phones over USB or wireless, capture app traffic separately from accessibility control, and import WeChat mini-program packages to configure an assessment session. A public vulnerability intelligence library can be searched by component, severity, and source and kept synchronized locally, giving assessments current context without sending your targets anywhere. Findings are managed by source, severity, and status, each linked back to its supporting evidence, and the report editor assembles them with a live preview, impact notes, and remediation guidance. The dashboard tracks assets, tasks, AI sessions, token usage, and runtime resources, and task admission is budgeted against physical memory so heavy scans do not starve the host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Shell Online lets a terminal session running on your own computer follow you to any browser, so your coding agent keeps working while you are away from your desk. Prefix the command you already run, such as shell claude, shell codex, or shell opencode, and your terminal prints a link, a password, and a QR code that open the same live session on a phone, tablet, or another computer. You watch output as it happens and reply to prompts from wherever you are, and closing the browser leaves the process running until it exits on its own. Inviting a teammate takes the same link: share it read-only so they can watch without typing, or let them type into the session with you. Terminal traffic is end-to-end encrypted by default, file access stays off until you deliberately expose a chosen directory, and a scoped MCP grant can let another agent inspect or steer a session for a limited time. With an account, linked machines and their sessions gather in one web app with team sharing. The relay the sessions pass through can run on your own server with the standalone Docker deployment, pointed at by the unchanged CLI. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Put a checkpoint in front of every tool call your AI agents make, so a poisoned web page or file cannot quietly move money or send private data. Each call is classified and policy-checked before it executes, then allowed, blocked, or held for a person. Held calls land in an approvals queue that shows what the user asked, which passage the agent read, and the exact recipient or amount in question, with one-click block or allow. Instruction provenance flags destinations that appeared only in untrusted content, like an IBAN hidden in a file. The cockpit lists every run as a timeline of steps with verdicts, groups violations by the protection that caught them, and scores ten attack surfaces on a Security 360 page. An agent registry tracks owners, scope, and call counts. Budgets, anomaly alerts, and a kill switch cap runaway behavior. Sensitive values are redacted from traces, signed receipts prove a call was allowed, and exports produce PDF and CSV audit evidence. Python and TypeScript SDKs plug in with one line, or an LLM proxy catches calls with an environment variable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Build an AI twin that has to show its homework. Agent-Me answers questions from a folder of Markdown notes you control, and every reply arrives with the exact source excerpts behind it. Pick Standard Q&A for a direct grounded answer, Role-based multi-agent to watch a planner, researcher, critic, and writer hand work to each other, or Verified multi-agent to add a final check on citation paths and answer metadata. When the notes do not contain an answer, the critic blocks the draft and the app says so instead of inventing one. Press Compare workflows to run the baseline and verified pipelines on the same question and read the results side by side. Download a sanitized run record for any collaboration, then open it later in the browser to review the trace without re-running anything. The interface speaks nine languages, and the default mode never calls an outside model, so private notes stay on your server. Swap in your own documents and test supported, unsupported, and adversarial questions to see exactly where an assistant stays grounded. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Meet an AI assistant that lives on your own server, remembers who you are, and keeps working after you close the tab. ShibaClaw opens with a four-step onboarding wizard for provider, credentials, and model, then drops you into a chat workspace with agent profiles for building, planning, reviewing, administering, and security work. Long-term memory lives in editable files, a dream diary records what the agent learned, and a Library view maps how profiles relate to each other. Agents call file, shell, and web tools, plug into external MCP servers, and hand work to isolated or forked sub-agents. The Automations page schedules one-shot, interval, or cron jobs like a weekday morning support brief, and a plugin catalog adds services like GitHub, Notion, PostgreSQL, and Google Workspace in one click. An optional knowledge base searches your own documents, and channel integrations reach the agent from Discord, Telegram, Slack, and Matrix. Provider choices span OpenRouter, Anthropic, OpenAI, Gemini, DeepSeek, Groq, Ollama, and any OpenAI-compatible endpoint. A credential vault encrypts keys, and file tools stay inside a restricted workspace. Anyone who wants research, drafting, and recurring chores handled by an assistant they host themselves will feel at home. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Libre WebUI is a self-hosted AI workspace that keeps chat, notes, personas, and agent tasks in one place you control. Local models run through Ollama, and hosted ones come from OpenAI, Anthropic, Gemini, Groq, Mistral, OpenRouter, or any OpenAI-compatible endpoint added on the provider settings page. Pick a model per conversation. Replies stream, prompts queue, chats fork into branches, and several models can answer side by side. Notes keep Markdown documents with revision history. Personas bundle a system prompt, a model, and memory into a reusable assistant, and prompt templates with typed variables appear when you type a slash in the composer. Knowledge collections ground answers in uploaded documents and cite their sources. The Work area gives each task its own workspace with files, a terminal, diffs, and a live preview, and automations run scheduled prompts that arrive as normal chats. Administrators create users and groups, hand out roles, issue scoped API tokens, and share chats, notes, and personas through one grant model. A private team assistant, a research desk, or a sandbox where agents build small apps all fit here. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Building LangGraph agents in code means imagining the graph; LangGraph GUI turns that graph into something you draw, wire, and run from the browser instead. You place a start node, add step nodes, and drag edges between ports to define the flow, with cycles created by simply connecting nodes back toward each other. Condition nodes split execution into green true paths and red false paths, info nodes append context to stage output, and subgraph nodes run a whole named graph inside another one. Tool steps call real Python functions that you define in tool nodes with the familiar decorator style, so file saving, lookups, and custom logic sit inside the visual flow. Graphs save to JSON on your computer, load back for editing, and upload to the server as workflow files ready to execute. You configure which LLM to use and its API key in the panel, run against local models through Ollama or hosted APIs, then download every file the run produced in the workspace. Files upload to the server workspace as working environment, and a cache clean clears it between runs. Example graphs for role-playing loops, lottery branch switches, and tool-using flows show patterns you can copy and refine with your own prompts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your team's documents sit in folders nobody can search, and the answer to a simple question hides on page 40 of a PDF someone saved last year. Pharos ingests PDFs, scans, Word documents, presentations, and spreadsheets into a local knowledge base, then answers questions against that library with citations traced back to the exact page. Hybrid retrieval finds the passages that matter, and every answer carries its evidence so readers can verify the claim in the source. Access control decides visibility per person: an API key resolves to an identity with a tenant and group memberships, retrieval filters hard to only the documents that identity may see, and a document with no permissions attached stays invisible to everyone. Two doors lead into the same library. The HTTP API runs a closed question-answering pipeline that retrieves, grounds, and answers in one call, and coding agents connect through MCP to decide for themselves when to retrieve, how to rewrite a query, and when a question needs multiple hops. A resident daemon keeps the search index and models warm, so every session shares one backend instead of reloading heavy resources. The deployment scales from one machine to replicated application tiers behind a load balancer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.