Open Agent Builder delivers a visual canvas for orchestrating AI agent workflows without writing Python scripts or managing complex codebases. The React Flow-powered drag-and-drop interface supports seven node types — Agent, Scraper, Transform, If/Else, Loop, User Approval, and MCP Tool — each configurable with provider-specific settings for Anthropic Claude (Haiku 4.5 and Sonnet 4.5), OpenAI GPT-5, Groq, or any OpenAI-compatible endpoint. The LangGraph orchestration engine handles state management, conditional routing, and human-in-the-loop approval gates while Firecrawl integration converts any website into structured, LLM-ready data through scrape, crawl, and map operations. E2B sandboxed code execution powers Transform nodes for secure data manipulation without risking host system integrity. Real-time streaming updates show execution progress node-by-node as workflows run, with Convex providing reactive database synchronization for workflow state and execution history. The TypeScript-first architecture (96.8% TypeScript) built on Next.js 16 App Router with Tailwind CSS delivers a responsive interface across devices. Clerk handles multi-user authentication with JWT integration for secure workspace isolation. Deploy via npm install and environment configuration with Firecrawl, Convex, and Clerk API keys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Convert paper archives, email attachments, and PDF records into an organized digital repository with Docspell, an open-source document management system that automates optical character recognition, metadata extraction, and full-text search. Users can ingest receipts and invoices through network scanners, monitored IMAP email mailboxes, mobile uploads, or drag-and-drop browser tools. The background processing pipeline executes optical character recognition via Tesseract, enhances image contrast with unpaper, and extracts text from Word documents and PDFs. Machine learning algorithms analyze document syntax to predict correspondents, suggest relevant organization tags, and identify due dates automatically. Team members can search their entire filing cabinet using complex Boolean queries and full-text indexing powered by Apache Solr or PostgreSQL. Administrators can configure multi-user collectives with isolated permissions, define custom metadata attributes, set up webhooks, and share time-limited document download links. Users can also merge multi-page scans, track processing job queues, and export curated document collections for tax filings or legal audits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

Fleet-wide container discovery, live log streaming, and Traefik reverse-proxy routing converge into Dockpeek, a lightweight Docker dashboard built for multi-host server environments. System administrators can launch web applications with one click through automatic port binding detection and integrated Traefik label parsing that extracts public routing hostnames directly from container configurations. The platform monitors multi-host environments through encrypted Docker socket proxies, letting operators inspect running containers, query published network ports, and trigger image updates from a unified control panel. Native Docker Swarm integration auto-detects active cluster managers, mapping swarm services and replicated tasks alongside standalone workloads while flagging degraded service replicas. Built-in log inspectors stream stdout and stderr outputs in real time with line-filtering controls to diagnose crashed services without opening remote SSH terminals. Operators can track image registries for newer digest tags, review pending updates across container fleets, and trigger graceful rolling container recreations directly from the dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Point Sirius Scan at a network range and it finds live hosts, fingerprints their services, and lists every matching CVE with its CVSS score in a live web dashboard. The Vulnerability Navigator groups findings by severity, filters on CVSS, and exports results for remediation tracking. Scans run on Nmap with NSE scripts kept in sync with upstream, alongside Naabu port scanning. Lightweight remote agents connect back over gRPC from other networks, so segments the central scanner cannot reach still get assessed, and the same agents can run YAML detection templates locally in CLI mode with no server connection at all. An operator console runs PowerShell commands against connected agents and keeps command history beside the scan results. Real-time progress, severity trend charts, host detail pages, and an environment overview show what changed between scans. A REST API on port 9001 with API key authentication feeds results into existing security workflows, while service health monitoring and centralized logging confirm the platform itself is behaving. An installer generates fresh secrets and an initial admin password, and production overlays tighten the deployment further. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When cybersecurity instructors and competition organizers host Capture The Flag tournaments, GZCTF orchestrates isolated per-team challenge containers, dynamic anti-cheat flags, and live exponential scoreboards from a single web platform. Event administrators can configure four distinct challenge modes covering static attachments, team-specific dynamic attachments, shared static containers, and isolated dynamic containers where unique flags are injected into each team's environment at launch. A customizable exponential scoring engine adjusts point values automatically as more teams solve a problem while awarding first, second, and third blood bonuses to top contenders. Built-in flag-sharing detection monitors every submission in real time, flagging suspicious cross-team flag reuse alongside live event streams and container logs. Participants can group into divisions, track their ranking trajectory on interactive score timelines, and upload post-game writeups directly into the portal for organizer review and batch archiving. Built-in network proxying forwards challenge traffic over WebSocket tunnels with optional packet capture so referees can audit exploit payloads during active matches. Multi-language localization, customizable branding, invitation gates, and email domain restrictions adapt the portal to university courses, corporate security drills, or international tournaments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 140,000 code commits, 1,200+ GitHub stars, and continuous development since 2004 spanning more than two decades of active maintenance through version 18.6.0 released in July 2026, XWiki operates as a second-generation wiki platform that goes beyond static pages by enabling teams to build custom collaborative applications directly inside wiki pages using structured data forms and in-page scripting. The Java backend runs on Apache Tomcat with PostgreSQL, MySQL, or Oracle database storage, serving a responsive web interface with a WYSIWYG editor featuring real-time collaborative editing, link and macro editors, user mentions, inline comments, annotations, and complete version history with diff comparison. The App Within Minutes extension lets non-developers create custom data-driven applications using drag-and-drop form builders that generate filterable live tables for structured data browsing without writing code. Over 900 extensions from the built-in Extension Manager add functionality including blogs, task trackers, forums, diagram editors, and Confluence migration tools. Enterprise integration features include LDAP and Active Directory authentication, SAML and OIDC single sign-on, fine-grained per-page and per-space permissions with nested page hierarchies, and multi-wiki support for hosting multiple independent wikis from a single installation. The RESTful API provides programmatic access to pages, spaces, objects, attachments, and properties with XML and JSON representations. Office document import converts Word and Excel files directly into wiki pages while PDF export generates formatted documents from wiki content. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-2.1 licensed.

Write standard SQL queries and watch Shaper turn them into interactive dashboards, scheduled reports, and customer-facing analytics widgets without maintaining a heavy business intelligence stack. Every query maps directly to a visual component through simple type casts like BARCHART, LINECHART, GAUGE, BOXPLOT, or DROPDOWN. Analysts can attach external PostgreSQL and MySQL databases, read Parquet, CSV, JSON, and Excel files straight from S3 object storage, or stream live events into the HTTP ingest API. Interactive filter controls let viewers slice metrics by date ranges, multi-select dropdowns, and dynamic parameter variables that automatically re-evaluate downstream charts. Teams version-control their entire reporting layer as plain SQL files in Git, making dashboard updates auditable in pull requests and simple for AI coding assistants to generate. Product engineers embed white-labeled analytics directly into customer web apps without iframes, issuing per-tenant JWT tokens to enforce row-level data isolation. Need scheduled deliverables for stakeholders? Configure SQL-driven background tasks that transform datasets on a cron schedule, send threshold alerts to Slack or Microsoft Teams, and generate downloadable PDF, PNG, Excel, or CSV reports. External collaborators can also view live metrics through password-protected sharing links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Managing dozens of smart locks, dimmers, thermostats, and sensors across a Z-Wave mesh often leaves homeowners blind to routing hops, sleepy battery devices, and firmware bugs; Z-Wave JS UI solves this by delivering a comprehensive browser control panel and MQTT gateway for your USB or network Z-Wave controller. Provision new devices with SmartStart QR scanning or S2 authenticated inclusion, inspect every Command Class parameter, and push over-the-air manufacturer firmware updates straight to switches and sensors. Interactive network topology graphs map live routing neighbors, link quality, and background RSSI signal strength, while built-in health checks and an integrated Zniffer packet analyzer pinpoint RF interference before automations fail. Operators can configure direct node-to-node association groups and multicast broadcast groups so wall switches trigger lights even when the central hub is offline. Scheduled Non-Volatile Memory controller backups and pre-inclusion restore points protect your mesh against hardware failure, and the configurable MQTT Discovery and WebSocket server bridges every entity seamlessly into Home Assistant, OpenHAB, Domoticz, Jeedom, and ioBroker. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Websurfx aggregates results from multiple search engines into one private, ad-free interface that never tracks your queries. Written in Rust, the backend provides memory safety against buffer overflows and data races at the language level while handling concurrent requests across upstream providers like DuckDuckGo and Searx. A built-in re-ranking algorithm scores and merges results by relevance, producing a unified page that draws from many sources while appearing as one coherent search. Safe-search filtering operates across four levels from unrestricted to complete content blocking, with regex-based filter lists for parental controls in schools and organizations. Upstream requests route through configurable proxy chains or Tor, preventing search providers from correlating your queries with a specific IP address. Four Docker image variants target different caching strategies: hybrid Redis plus in-memory for maximum throughput, Redis-only, in-memory-only, or zero-persistence for environments where cached queries must never touch disk. The Lua configuration file controls engine selection, request timeouts, rate limiting thresholds, and production-mode delays that throttle upstream traffic to prevent abuse. Quick-result widgets handle calculations, currency conversions, and unit transformations inline without external redirects. Image search capabilities serve visual discovery for designers and researchers who need media results without surveillance. Runs on a RepoCloud VPS with dedicated resources and full root access. AGPL-3.0 licensed.

Create an invoice, share a secure link, get paid — that's the entire workflow, no client portals or account registrations required. Invio distills billing into its absolute minimum viable surface while still producing legally compliant EU electronic invoices in Factur-X/ZUGFeRD 2.2 BASIC, UBL 2.1, and Italian FatturaPA formats, all embedded as XML attachments inside WeasyPrint-rendered PDFs. The Deno 2 backend uses Hono v4 for HTTP routing with SQLite persistence, while the SvelteKit 2 frontend styled with Tailwind CSS v4 and DaisyUI v5 delivers a responsive interface that stays out of your way. The team access system includes a permission matrix, TOTP-based two-factor authentication, and OIDC integration with configurable auto-provisioning — drop it into existing identity infrastructure without manual user management. Preset products let you build invoices from reusable catalog items. A change history log tracks every modification for audit purposes. Rate limiting protects the API behind reverse proxies. The entire stack ships as a single multi-stage Docker image containing Deno, Bun, Node, WeasyPrint, and all required font packages — zero external service dependencies beyond the container itself. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Unlicense licensed.

Turn your scattered collection of liquor bottles and bar tools into a master mixology station with an intelligent digital cellar. Bar Assistant tracks your personal liquor cabinet, inventory levels, and available mixers against a catalog of more than 500 cocktail recipes. The platform calculates exact alcohol by volume ratings, computes ingredient costs per serving, and dynamically highlights every cocktail you can craft with on-hand supplies. Built-in recipe scrapers extract formula details, measurements, and glassware requirements directly from web links, JSON payloads, or YAML files. Multi-bar workspaces allow home mixologists and commercial venues to separate private collections from communal drink menus while handling complex ingredient substitutions, custom infusions, and shopping lists. Integrated Meilisearch indexing powers instant typo-tolerant searches across spirit categories, flavor tags, and cocktail strengths. Visual cocktail cards display high-resolution drink photography, user ratings, glassware requirements, and step-by-step garnish instructions. Deploy Bar Assistant on RepoCloud with dedicated VPS compute, full root SSH credentials, and in-browser console access, backed by an open-source MIT license.

Kurrier unifies email, calendars, contacts, and file storage in a single web interface that connects to any email provider you already use. The Next.js frontend with Nitro API worker deploys via Docker Compose on PostgreSQL and Redis, delivering a cohesive workspace where IMAP/SMTP mailboxes from Gmail, Outlook, or corporate servers sit alongside transactional providers like AWS SES, SendGrid, Mailgun, and Postmark. Automatic inbox building handles threads, attachments, sent items, and deletion sync through persistent background polling. The CalDAV backend enables full two-way calendar synchronization with iOS, macOS, Android via DAVx5, and Thunderbird, supporting event invitations, RSVP processing through the inbox, timezone-aware scheduling, and contact-aware attendee linking. CardDAV contacts sync bidirectionally across all devices with unified name, avatar, and email resolution. Kurrier Drive provides integrated file storage through WebDAV locally or S3-compatible backends for cloud storage. Multiple identities and domains let you manage several email accounts from different providers in one interface, with fast local search indexing subjects, senders, and content without dependency on external APIs. The API-first architecture exposes clean endpoints for automation and custom integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Created in March 2026 and rapidly gaining traction in self-hosting communities, DockPanel delivers the most feature-dense free server panel available — 811 API endpoints, 153 one-click Docker app templates across 14 categories, and full multi-server management, all running on three Rust binaries consuming under 50MB of combined RAM. The panel handles the complete server lifecycle: sites with automatic SSL via Let's Encrypt, MySQL and PostgreSQL databases in Docker containers, Git push-to-deploy using Nixpacks for automatic language detection without Dockerfiles, blue-green zero-downtime deployments with automatic rollback on failed health checks, DNS management, mail servers, monitoring dashboards, and encrypted backups to S3, SFTP, Backblaze B2, or Google Cloud Storage. Security receives production-grade attention with per-image CVE scanning that gates deployments, a built-in WAF, passkey authentication alongside Argon2 password hashing, HttpOnly JWT sessions with blacklist-on-logout, rate limiting on auth endpoints, and fail2ban integration — all verified through an 18-vulnerability pentest with zero remaining issues. Infrastructure as Code support exports your entire server configuration to YAML, and the developer CLI provides status, diagnose, and export commands for automation. GPU passthrough enables AI workload hosting, reseller accounts support white-label branding for agencies, and ARM64 compatibility covers Raspberry Pi and Oracle Cloud free-tier deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 600 GitHub stars and a featured Show HN launch, Mission Control is the agent-first command center that replaces the chaos of manually shepherding AI agents with structured delegation, approval workflows, and autonomous execution. The Next.js 15 web UI delivers an Eisenhower priority matrix with drag-and-drop quadrants, a Kanban board tracking tasks through Not Started, In Progress, and Done columns, and a goal hierarchy with milestone progress bars — powered by shadcn/ui, Radix UI, and @dnd-kit. Six built-in agent roles — Researcher, Developer, Marketer, Business Analyst, Tester, and You — receive tasks through a token-optimized API compressing context by 92 percent to approximately 50 tokens versus 5,400 unfiltered. The autonomous daemon polls task queues on cron schedules, spawns Claude Code sessions via the official CLI, enforces concurrency limits, and auto-retries with loop detection that escalates to human decisions after three failures. Field Ops extends execution to 64 external services across 16 categories with working X, Ethereum with MetaMask signing, and Reddit adapters, protected by AES-256-GCM encrypted vault with scrypt key derivation, per-service and global spend limits, a circuit breaker, and three autonomy levels. All data lives in local JSON files with Zod validation and async-mutex locking ensuring safe concurrent writes, backed by 193 automated Vitest tests. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

New hires fail from information overload and IT bottlenecks, not lack of goodwill - the observation behind ChiefOnboarding, a free, open-source employee onboarding platform (Django, Celery, PostgreSQL, Redis). Its answer is sequences - drag-and-drop timelines that drip-feed to-do items, resources, courses, forms, and badges to each new hire, triggered by dates or by completing a previous item, so nobody faces everything at once. Onboarding starts before day one: preboarding pages welcome hires early, and colleagues can leave personal messages that appear there. The account provisioning module creates the new hire's Slack, Google, Asana, and other accounts automatically on the scheduled day via a library of integrations plus custom webhooks - the IT ticket queue never gets involved. Everything works through two equivalent interfaces: a full web dashboard and a Slack bot, either usable standalone. Slack can even auto-create new hire accounts when someone joins the workspace and assign default sequences with zero manual action. Colleague tasks with comments and collaboration, a searchable people directory, scheduled introductions, and per-hire timezone awareness (no 3 a.m. notifications) round it out. No trackers, no phoning home - third-party credentials sit in encrypted fields on your server.

Information overload is the default state of the modern internet, and Glean exists to tame it by pulling every blog, newsletter, and news source you follow into a single, organized reading experience with an interface that prioritizes clarity over clutter. Subscribe to RSS and Atom feeds, import your existing subscriptions via OPML, and organize everything into multi-level folders with a flexible tagging system that lets you slice your reading list by topic, priority, or mood. A three-pane layout presents your feed list, article summaries, and full content side by side, with one-click actions for marking articles as read, saving them for later, bookmarking favorites, or archiving what you have already processed. Background workers fetch new articles every 15 minutes so your feeds stay current without manual refreshes. The preference learning engine (backed by Milvus vector embeddings) scores incoming articles against your reading history and surfaces a personalized Smart Feed of content you are most likely to care about, reducing the time spent scrolling past irrelevant posts. A built-in MCP server lets AI assistants like Claude Desktop search and interact with your feed library directly. The admin dashboard on a separate port provides user management, system monitoring, and configuration controls for multi-user deployments. Bookmark external URLs from any browser with the Chrome extension, or access your feeds on mobile through the Progressive Web App. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Invoicerr nails the exact billing sequence freelancers actually use: draft a quote, send it to the client, collect a legally-binding electronic signature via a secure browser link, convert the approved quote into an invoice, and generate a branded PDF — no DocuSign account, no external signing service, no enterprise complexity. The React frontend with NestJS backend uses Prisma ORM with your choice of SQLite for instant local setup or PostgreSQL for production workloads. Quotes and invoices are first-class objects with independent status tracking — unread, sent, viewed, signed for quotes; paid for invoices — not a single form with a label swap. The e-signature system generates secure-token signing links that clients open in their browser to review and sign documents without needing any account or external service. PDF generation renders quotes, invoices, and receipts with your company logo, name, VAT number, colors, and custom email templates so documents reflect your brand identity rather than the software's defaults. Authentication supports JWT tokens or OIDC providers stored in cookies. The REST API backend enables future integrations with mobile and desktop clients. A plugin system with community-made features and outgoing webhooks extends functionality without forking core code. International-friendly with customizable currencies. Deploy with Docker Compose using the prebuilt image from GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Why export timesheets from one tool, manage Kanban tasks in a second, and copy billable hours into a third just to send a client invoice when TimeTracker handles the entire agency workflow in one self-hosted platform? Start a persistent server-side timer from any browser or log hours manually using saved templates, bulk entry forms, and automatic idle detection. Project managers organize deliverables across drag-and-drop Kanban boards, Gantt timelines, and threaded task comments while monitoring real-time project budgets and cost burn rates. A built-in CRM tracks client contacts, lead scores, and sales pipeline stages before work even begins. When billing day arrives, you convert unbilled hours, reimbursable receipts, mileage logs, and per diem allowances directly into branded multi-currency invoices without double-billing a single minute. Finance teams can customize PDF invoice layouts, automate recurring billing schedules, and transmit EN 16931 compliant electronic invoices via Peppol or embedded ZUGFeRD/Factur-X XML. Interactive analytics dashboards and scheduled CSV or Excel exports give every stakeholder complete visibility into billable utilization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.