PenguinHarness
PenguinHarness turns a one-sentence description of the agent you need into a working app, then lets other agents tune it round after round until its benchmark score climbs. Nine self-improvement algorithms ship as plugins, including OPRO, APE, ACE, and AWM, and every candidate becomes a snapshotted version with its score recorded in an Evaluation Center. Seventeen ready-made benchmarks cover data analysis, repository fixes, workflow automation, and terminal science tasks. Agents read and act on web pages through a built-in browser panel or your own Chrome, and each agent can grow a hot-reloaded workbench page like a contract review desk with uploads and downloadable reports. Add a machine over ssh and conversations in that workspace run there, inside the same window. A Cost Center breaks down spend per run, trajectories show every turn on an execution timeline, and replies can carry forms, charts, and live widgets. An Agent API streams runs to outside apps, and agents can be reached from Feishu, QQ, Telegram, or WeChat. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Aegis
Put a checkpoint in front of every tool call your AI agents make, so a poisoned web page or file cannot quietly move money or send private data. Each call is classified and policy-checked before it executes, then allowed, blocked, or held for a person. Held calls land in an approvals queue that shows what the user asked, which passage the agent read, and the exact recipient or amount in question, with one-click block or allow. Instruction provenance flags destinations that appeared only in untrusted content, like an IBAN hidden in a file. The cockpit lists every run as a timeline of steps with verdicts, groups violations by the protection that caught them, and scores ten attack surfaces on a Security 360 page. An agent registry tracks owners, scope, and call counts. Budgets, anomaly alerts, and a kill switch cap runaway behavior. Sensitive values are redacted from traces, signed receipts prove a call was allowed, and exports produce PDF and CSV audit evidence. Python and TypeScript SDKs plug in with one line, or an LLM proxy catches calls with an environment variable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Ferro Labs AI Gateway
Thirty model providers, one OpenAI-compatible endpoint: Ferro Labs AI Gateway routes every request from your applications to the provider that should answer. Eight routing strategies cover fallback chains, weighted load balancing, lowest latency, lowest cost, content-based rules, A/B tests, and conditional targets, each with retries and circuit breakers. Guardrail plugins filter blocked words, redact personal data, scan for leaked secrets, block prompt injection, validate response schemas, and enforce rate limits and per-key spend budgets. Identical prompts can come back from a response cache, and tool servers connect through MCP so the gateway can run the tool-call loop itself. The console opens with a getting-started checklist, then charts traffic, token throughput, latency percentiles, and cost by model. Providers, routing targets, and plugins each get their own page, a playground sends test chats through the real routing path, and request logs plus an audit trail record who changed what. Scoped admin and read-only keys give every operator separate access, and configuration history allows a rollback. OpenTelemetry traces and Prometheus metrics feed existing dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Lemma
Every job gets its own AI teammate in Lemma, shared with your whole team and busy building the pages, tables, workflows, and apps the work needs. Each teammate lives in its own space, so the briefs it writes, the records it keeps, and the screens it builds stay where your people can open them instead of vanishing up a chat thread. Agents run when asked and also on a schedule, a table change, or an incoming webhook, with every run recorded step by step. Before anything consequential, like sending an email or issuing a refund, the run pauses and asks the person who owns the decision. Workflows hand work between agents, plain code, decisions, loops, and named people, and a run can wait days for an approval. Teammates keep memory as Markdown notes that anyone can open and correct. People reach them from Slack, Microsoft Teams, WhatsApp, Telegram, or email, and one permission model covers roles, rows, and approvals everywhere. Bring a Claude Code or Codex subscription, a hosted model, or any OpenAI or Anthropic compatible key. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
TokenHub
Give every team, project, and application one governed door to AI models instead of scattering raw provider keys across codebases. TokenHub is an OpenAI-compatible gateway that serves chat completions, responses, embeddings, reranking, and image generation, plus Anthropic Messages endpoints, in front of OpenAI, Azure OpenAI, Anthropic, Gemini, DeepSeek, Qwen, Codex subscriptions, local models, and more than 150 provider templates. Administrators publish a model catalog and write routing policies with priority, weight, failover order, and cost or quality preferences, so a provider outage never reaches client code. Users create project-scoped API keys with quotas and concurrency limits, team leaders manage project spaces and members, and each role gets a workspace that matches its job. Usage analytics and request logs attribute every call to a user, project, team, model, and cost center, and provider reconciliation compares internal usage with upstream bills. Sign in through OAuth or OIDC, control access with RBAC, and keep an audit trail of administrative changes. The console switches between English, Chinese, Japanese, and Russian, and includes an API documentation workspace for developers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
AgentConnect
AgentConnect brings Claude Code, Codex, Grok Build, DeepSeek, and any other ACP-compatible coding agent into the chat channels and repositories where your team already works, each with a role of its own. Mention an agent in Slack, Microsoft Teams, Google Chat, Lark, Discord, or Telegram and it replies in the thread, calls on a colleague agent when needed, and keeps its session visible to teammates who can step in. Work can also start from a GitHub, GitLab, Gitea, or Azure DevOps pull request, a Linear issue, a webhook, or a schedule. The web console organizes the fleet into Agents, Sessions, Schedules, Tools and Skills, Knowledge, and Daemons views. Every agent gets its own memory, skills, MCP servers, workspace, and sandbox policy, and reviewed Knowledge pages can be published for all agents to search. Decisions route new conversations to specialist agents and pick the runtime and model for each session. Review bots can run several reviewers with separate instructions on one pull request. Set who may see each agent or session, which repositories it can touch, and which agents it may call. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Nod
Nod is a personal AI assistant with its own computer, so you can hand it an errand like chasing an unpaid invoice or cancelling a trial and watch it finish the job on real websites. One ongoing conversation follows you from the browser to Telegram and WhatsApp, and long jobs become saved tasks with live status lines on a Scheduled page. Connect Gmail, Calendar, Slack, Notion, Linear, or an n8n instance, and it reads threads, drafts the replies you owe, and prepares a one-page brief before each call. Every action that could change something is checked against your rules, and anything uncovered waits for your yes. Passwords, codes, and cards sit in a Vault that the server types into websites, so the model never sees them. Memory notes are visible, editable, and tied to the message they came from. Schedules run recurring checks like a weekly recap or a price watch that speaks up only on change. Usage lists every action with costs and a monthly spending limit. Pick OpenAI, Anthropic, Gemini, OpenRouter, Bedrock, or a local Ollama server as the model. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Twigex
Teams that juggle a file drive, a chat app, a task tracker, and a dashboard tool can fold all four into one self-hosted workspace. Twigex stores files on local disk or S3-compatible storage, shares them with users, groups, or public read-only links, and opens office documents in EuroOffice or Collabora for simultaneous editing. Chat offers channels and direct messages with reactions, mentions, and link previews. Video calls and scheduled meetings run through LiveKit, and guests can join a channel by link. Projects organize work as tables of tasks with custom fields and subtasks, viewable as a grid, kanban board, Gantt timeline, or calendar. Collimato, the analytics module, connects to databases and APIs, models the data, and builds charts and dashboards with filters and KPI cards. The admin area covers users, groups, roles, storage backends, SMTP, office editing, and security settings. The Community Edition is free to run from one binary, a Docker Compose stack, or a Helm chart on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
W-CMS
Taking notes and publishing a website usually need two different tools, but W treats them as the same act. Every page you create gets its own address, and a privacy level marks it public, private, or not yet published. The editor offers tabs for Markdown content, CSS, a custom body template, and JavaScript, with a metadata panel for title, description, tags, date, and authors. Home view lists every page with sorting, filters, search, and saved bookmarks for common queries. Two alternative views draw pages as a link graph and, for pages with coordinates, as markers on a map. A media manager organizes uploads in folders, offers a thumbnail gallery, and can optimize images for the web. Several users can work together with reader, editor, super editor, and admin roles, and optional LDAP sign-in is available in beta. Templates share layouts across pages, URL commands like add and edit speed up navigation, and an experimental API opens the data to scripts. Pages keep working even with JavaScript turned off. Everything is stored in plain files, so no database server is needed. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Newspipe
Newspipe gives a team or a household its own feed reader that nobody can shut down. Subscribe to any RSS or Atom source, sort feeds into categories, and read articles in a three-column view with the list in the middle and the full text on the right. Tabs filter unread, read, liked, and read-later items, stars mark favorites, and search finds anything already stored. Notes can be attached to any article and reviewed on a dedicated page. A history page charts how many articles arrived each year, and the inactive feed report flags sources that went quiet. Bookmarks have their own manager with a Pinboard importer and public listings. A single instance serves many users, and administrators create accounts and trigger fetches from an admin area. Feeds import and export as OPML, whole accounts move as JSON, and an API lets scripts manage subscriptions or plug in a custom crawler. The interface speaks English, French, and German, switches between light and dark themes, and can authenticate against LDAP. A scheduled command fetches new articles automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
WebDuck
A DuckDB file is fast, but sharing one across a team usually means passing it around by hand. WebDuck puts DuckDB behind a server, so analysts and applications reach the same databases through a REST API or a dark amber web interface. Projects group databases, and each database can carry its own API password with read, write, or admin access levels. The dashboard shows server status, a live view of incoming REST traffic, and storage use. A browse view offers tree navigation, infinite scroll, and inline cell editing. The SQL editor runs multi-statement scripts, keeps a query history, accepts Alt+Enter to execute, and can load a whole SQL file. Import and export handle CSV, Parquet, and JSON up to 256 MB. Deleted databases move to a trash where they can be restored. Per-database write protection and a compression action keep files safe and small. Administrators sign in with bcrypt-hashed passwords and JWT tokens, and the interface ships in English and German. Setup comes through Docker, pip, or a YAML file, and a small command line initializes the server, adds users, and reports status. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Timeful
Picking a meeting time for six people usually takes forty messages, and Timeful replaces them with one link. Create an event, choose a date range or days of the week, and share the URL; guests do not need an account. Each person drags across a time grid to mark what works, and the combined heatmap reveals the overlap at a glance. Times can be marked as available or only if needed, and a best-times toggle highlights the slots that suit the most people. Calendar autofill pulls busy blocks from Google, Apple, Outlook, or an ICS feed so nobody retypes their week. Time zones convert automatically for distributed teams. Event owners can hide responses from other guests, duplicate polls for recurring meetings, export availability as a CSV, and schedule the final slot straight into a Google Calendar event. Availability groups keep a team's live calendar overlap on a single page, and reminder emails go out to attendees on the day of the event. A plugin API lets browser extensions read and write availability. The interface is a calm green grid with no clutter. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
UptimeKit
UptimeKit watches your services from several regions at once and publishes the verdict on a status page your customers can actually read. A central dashboard assigns checks to worker probes that run them on schedule, covering HTTP and HTTPS, TCP, ICMP ping, DNS, keyword matches, and JSON responses. Monitors are sorted into nested groups and tags, and HTTPS targets get automatic certificate expiry tracking. When something breaks, an incident takes shape with severity, status transitions, comments, and a resolution flow, either from the dashboard or from a Prometheus AlertManager alert. Status pages come in multiple flavors: public, password protected, or tied to a custom domain, with themes, uptime history bars, and email subscribers who hear about every update. Notifications reach Discord, Google Chat, Telegram, ntfy, Apprise, and plain webhooks. Organizations with roles keep several teams in one installation, and OIDC single sign-on connects the login to an existing identity provider. Response time charts break latency into percentiles per region over any period you pick. A planned maintenance window announces itself on the status page before it begins. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Cryptgeon
Passwords pasted into chat live forever, but a Cryptgeon note vanishes the moment it has been read. You type a note or pick a file, press create, and get a share link with a QR code to hand over. Encryption happens in the browser with XChaCha20-Poly1305, so the server holds only ciphertext and never sees the key that sits after the hash in the link. Advanced options set the number of views or a lifetime in minutes, and a custom password can be required on top of the generated key. Everything is kept in memory in a Valkey or Redis cache, so nothing is written to disk. Operators tune limits with environment variables for note size, maximum views, maximum expiration, file uploads, and ID length. The interface is a calm monospace page with dark and light themes. A command-line client sends notes from a terminal, and a Raycast extension covers the macOS launcher. Theme text, logo, favicon, and an imprint page can be customized to match a team or company. A health endpoint reports status to proxies and orchestrators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Scratch Map
Gold foil covers the whole planet until you click a country, and then it scratches away to grey, which is the whole charm of Scratch Map. A world map lists every UN member state plus selected territories, and region maps cover the United States, Canada, Australia, France, Mexico, Japan, Spain, the United Kingdom, Germany, New Zealand, Brazil, China, India, and Italy. Each click opens a prompt where you can record the year you visited and paste a link to your photo album, and clicking again updates the details or unscratches the place. Maps zoom with the mouse wheel or on-screen buttons, pan by dragging, fit to the screen on demand, and go fullscreen. The home page shows thumbnails of every map with expandable tables that separate visited places from those still waiting, with years and clickable album links. A Share button can expose a read-only view of any map when the optional sharing flag is on. Everything lives in a single JSON file in a data folder, so backups are a simple copy. A Docker health check keeps container platforms informed, and the port, address, data directory, and log level are set with environment variables. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
NodeDR POS
Scan a barcode, press Enter, and the sale is done: that is the whole rhythm of NodeDR POS at a shop counter. A USB scanner works, and so does a phone or tablet camera. Each sale can carry tax breakdowns with GSTIN and HSN codes, percentage or flat discounts, loyalty points, store credit, and customer dues for short payments. Cash, UPI with a payment QR, and card are supported in more than 20 currencies. Receipts print through the browser, download as PDF, or go straight to a USB thermal printer. Inventory takes bulk CSV or Excel imports, generates printable EAN-13 barcode labels, looks up unknown barcodes in free product databases, and flags low stock. Purchasing adds suppliers, purchase orders, and reorder suggestions. Orders from WooCommerce, Shopify, or a custom site flow through a New, Packing, Ready, and Collected board. Phone and laptop sellers can switch on IMEI tracking with warranty lookup. A customer display shows the live cart on a second screen. Reports cover revenue, gross profit, average bill, category mix, and busy hours, with staff roles and A4 tax invoices alongside. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
nextDash
A bookmark bar that also knows if your homelab is on fire is the pitch behind nextDash. Links live on pages and categories with tags, notes, an inbox for unsorted finds, and one search panel for bookmarks, commands, and containers. Mark any link as Monitor and the server checks it every few minutes, keeping 30 days of uptime, certificate and domain expiry dates, and drift warnings, with alerts to ntfy, Slack, Discord, Telegram, Gotify, Apprise, or a phone push. A Containers view lists every Docker container with logs, start, stop, and update with automatic rollback, each matched to its bookmark. Dashboard widgets cover weather, feeds, CPU, memory, disks, Unraid, Jellyfin, Plex, Sonarr, Radarr, qBittorrent, and Home Assistant. A theme studio offers 390 themes and 267 backdrops in six languages, and an optional assistant answers in plain words when you switch it on. Imports arrive from every browser, Pocket, Raindrop, and linkding, and automatic backups with a 30-day trash protect the collection. The weekly digest sums up broken links, expiring certificates, and pending container updates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Sora Frame
An old tablet on the shelf can show family photos all day once Sora Frame feeds it. The slideshow runs in any browser with soft cross-fades, a large clock, date, and weather widget, and it keeps the screen awake, even on iPads and phones. Install it to the home screen like an app, then pick what plays: every photo or a single folder, nested folders included. The library takes photos by drag and drop or the Upload button, builds folder covers from their own pictures, moves photos with a drag, deletes a multi-selection in one go, and offers an optional Google Photos import. JPEG, PNG, WebP, GIF, and iPhone HEIC files are accepted, and only a resized copy is stored. Notes slip a message like a visit reminder into the rotation, with up to four photos, a date range, an optional event countdown, and a choice of eight memory-book layouts. Each frame or family member gets a PIN limited to chosen folders, and a new frame pairs by scanning a QR code or opening an address that carries the PIN. The interface speaks English, Spanish, French, German, Portuguese, Italian, Dutch, Hindi, Japanese, Chinese, and Arabic, and keyboard shortcuts cover play, next, fullscreen, and photo info. A living room shelf, a grandparent's tablet, or an office desk display makes a fine home for it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.