The most comprehensive open-source control plane for Hermes Agent — a full workspace combining AI chat, visual workflows, multi-agent orchestration, coding agent management, and platform channel integration in one self-hosted dashboard. Real-time chat streaming over Socket.IO connects to any OpenAI-compatible backend including Ollama, OpenAI, Anthropic, and custom endpoints with multi-session management, tool call expansion, inline file previews for HTML, PDF, DOCX, images, and source code, plus profile-scoped uploads and workspace attachments. The visual workflow builder provides a Vue Flow canvas for constructing DAG-structured pipelines with directed edges, conditional routes, approval gates, loops, and live execution with per-node status updates. Platform channel integration configures Telegram, Discord, Slack, WhatsApp, Matrix, Feishu, DingTalk, QQBot, WeChat, and WeCom bots from one page with credential management and per-platform behavior settings. Multi-agent group chat rooms enable real-time messaging with @mention routing, automatic context compression, and SQLite message persistence. The coding agent panel installs, launches, and monitors Claude Code and Codex with built-in terminal, session history, and file diffs. Usage analytics track token consumption, estimated costs, cache hit rates, and 30-day daily trends with model distribution charts. Kanban boards plan and track agent work alongside cron job scheduling for recurring tasks. Deploy via Docker, npm CLI, or desktop installer for Windows, macOS, and Linux. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Airtable's spreadsheet-database model, self-hostable and open-source: that is Baserow. It presents data in a spreadsheet-style grid, but underneath each table is a real relational structure with typed fields, links between tables, filters, sorts, and multiple views (grid, gallery, form, kanban, calendar). Beyond the database core, it includes an application builder for composing pages and portals on your data, workflow automations, and dashboards. Everything is API-first: each table exposes a REST endpoint with token auth and webhooks, so it plugs directly into n8n, Zapier, or custom scripts. The stack is Django (Python) on the backend, Vue.js on the frontend, PostgreSQL for storage, with Redis for async tasks. Core features are MIT-licensed; premium features are a paid add-on. The self-hosted version has no row, storage, or API request limits - Airtable's per-base record caps and monthly API quotas simply don't exist here, and capacity is bounded only by your PostgreSQL database and disk. Existing Airtable bases, CSVs, and Excel files import directly with structure preserved, so migration doesn't start from a blank slate, and both the backend and frontend support plugins for custom field types and integrations without forking the core. For non-technical teammates the interface behaves like a spreadsheet; for engineers, the data model is the API.

The open-source PaaS with 55,000+ GitHub stars and the largest one-click service catalog in its class — Coolify gives you the Vercel push-to-deploy workflow on a dedicated server you control. Connect a GitHub, GitLab, Bitbucket, or Gitea repository and every push builds and deploys automatically via Nixpacks, a Dockerfile, or Docker Compose, with Traefik or Caddy reverse proxying, automatic Let's Encrypt certificates, and per-branch preview deployments with their own URLs. Databases — PostgreSQL, MySQL, MariaDB, MongoDB, Redis — provision in a few clicks, and a catalog of 280+ one-click service templates covers WordPress, n8n, Grafana, MinIO, Plausible, Ollama, and more. One dashboard manages the entire server, with Docker Swarm available for clustering multiple nodes. Backups go to any S3-compatible storage with one-click restore, and a full API supports CI/CD integration. All configuration lives on your own server, so resources keep running even if you stop using Coolify — no vendor lock-in by design. Running on a dedicated VPS with guaranteed CPU, RAM, and SSD, full root access via SSH and browser console. Apache 2.0 licensed.

Prompt, run, edit, and deploy full-stack Node.js applications from a browser tab: Bolt.diy is the official open-source version of Bolt.new's AI coding agent. Its foundation is StackBlitz's WebContainer technology - a sandboxed in-browser Node.js environment where the AI controls the whole stack: filesystem, npm, dev servers, terminal, and browser console. That means the agent does not just generate code; it installs dependencies, runs Vite or Next.js, reads errors, and fixes them. The defining difference from Bolt.new is model choice per prompt: 19+ providers including OpenAI, Anthropic, Gemini, DeepSeek, Groq, Mistral, Amazon Bedrock, and local models via Ollama or LMStudio, extensible through the Vercel AI SDK. Development ergonomics include live preview, a diff view of AI changes, codebase search, file locking to prevent generation conflicts, 15+ starter templates (React, Vue, Next.js, Astro, Svelte, Expo), and MCP support for external tools. Projects integrate with Git and Supabase, and deploy in one click to Vercel, Netlify, or GitHub Pages.

With over 84,000 GitHub stars since its April 2026 launch, Open Design has emerged as the definitive open-source alternative to Anthropic's Claude Design. Rather than shipping its own language model, Open Design acts as an agent-agnostic design orchestration layer that auto-detects 25+ coding CLI executables on your PATH — including Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Qwen, GitHub Copilot CLI, Hermes, and Kimi — or connects to any OpenAI-compatible endpoint via its built-in BYOK proxy at /api/proxy/stream. The platform introduces a file-based protocol where SKILL.md files define composable design workflows and DESIGN.md files establish version-controlled brand systems, currently shipping 31 first-party skills and 72 brand-grade design systems. Output spans web and mobile prototypes, live dashboards, presentation decks, raster images, video, and HyperFrames motion graphics, with export pipelines for HTML, PDF, PPTX, MP4, and ZIP. The daemon architecture uses SQLite for project state and serves a sandboxed iframe preview renderer with vendored React and Babel for JSX artifacts. Deployment options include the native desktop app for macOS, Windows, and Linux, local daemon mode via pnpm tools-dev, a single-container Docker Compose path serving both API and Next.js frontend on port 7456, and Vercel deployment for the web layer. On RepoCloud, deploy Open Design on a dedicated VPS with full root SSH access, persistent storage for your design systems and generated artifacts, and complete control over which AI providers and agent CLIs your instance connects to, all under the Apache-2.0 license.

Large language models get a polished front end that can run fully offline: Open WebUI is the self-hosted front end of choice. It talks to local model runners, primarily Ollama, and to any OpenAI-compatible API, so LM Studio, vLLM, Groq, Mistral, OpenRouter, and cloud providers all plug into the same chat interface and can be mixed per conversation. RAG is built in: upload files to knowledge bases or reference them in chat with the # command, backed by a choice of nine vector databases (ChromaDB and PGVector officially maintained) and multiple extraction engines including Tika and Docling, with hybrid BM25-plus-vector search and cross-encoder reranking. Web search results from providers like SearXNG, Brave, and Tavily inject directly into conversations. Extensibility comes from Python tools and functions that run inside the chat, a Pipelines plugin framework, and native MCP support. Multi-user features include RBAC, SSO, and group permissions, and the instance itself exposes an OpenAI-compatible API your own apps can call.

Marketing campaigns and transactional mail from one open-source platform: Notifuse is a modern, self-hosted alternative to Mailchimp, Brevo, and Klaviyo without per-email or per-contact pricing. Built with Go and React on PostgreSQL, it separates concerns cleanly: a drag-and-drop visual builder composes responsive templates from MJML components with Liquid variables like {{ contact.first_name }} and per-template version history; campaigns add A/B testing across subject lines, content, and send times; and a REST transactional API serves application-triggered mail. Delivery routes through your choice of provider - Amazon SES, Mailgun, Postmark, SendGrid, SparkPost, Mailjet, or plain SMTP - with multi-provider failover. Contacts carry custom fields and a full activity timeline (messages, profile changes, webhook events), and real-time segmentation builds dynamic rules over properties, activity, and subscriptions. Event-driven automations create behavioral sequences, a notification center gives recipients self-service preference management, and an S3-compatible file manager handles images with CDN delivery. Multi-tenant workspaces with isolated databases and custom domains suit agencies. Open and click tracking report engagement in real time.

An Airtable-style spreadsheet interface directly on PostgreSQL: Teable is an open-source no-code database where every table is a real Postgres table. Unlike tools that store records in a metadata abstraction layer, every Teable table is a real Postgres table with standard column types, so filtering, sorting, and grouping run at database speed, million-row tables answer complex filters in roughly 200 milliseconds without index tuning, and any PostgreSQL-compatible tool - psql, BI dashboards, ETL pipelines - can query the same data directly. The interface offers Grid, Kanban, Gallery, Calendar, and Form views as non-destructive overlays with their own filters and hidden fields, plus 20+ field types, formulas, comments, attachments, batch editing, undo/redo, and edit history. Collaboration is real-time with live cursors and instant sync across views, backed by Redis, and a REST API is auto-generated per table, largely compatible with Airtable API clients - alongside native SQL access for BI tools, analytics pipelines, and your own applications to JOIN and query directly, with no exports, API rate limits, or sync jobs. Global search spans all records, chart plugins handle quick visualization, and CSV and Excel import/export cover migrations. Where Airtable caps paid plans at 100K-500K rows and charges roughly $20 per user per month, a self-hosted Teable instance has neither limit: the Postgres database itself is the export if you ever leave. Built in TypeScript with NestJS, deployed via Docker with PostgreSQL and Redis, and licensed AGPL-3.0.

Open-source alternative to OpenAI's Canvas — a collaborative writing and coding environment where AI agents help you draft, edit, and refine documents through an agentic architecture built on LangGraph. The dual-mode editor combines a BlockNote rich text editor for live-rendered markdown with a CodeMirror-based code editor supporting syntax highlighting across multiple programming languages, letting you switch between prose and code artifacts within the same session. The built-in reflection agent automatically generates style rules and user insights from your chat history, storing them in a shared LangGraph memory store that persists across sessions for increasingly personalized assistance. Pre-built quick actions provide one-click access to common writing transformations including summarize, expand, simplify, and translate, while coding actions offer explain, refactor, add comments, and convert between languages. The monorepo architecture separates the Next.js 14 frontend from the LangGraph agent backend, connecting via HTTP and WebSocket protocols through the @langchain/langgraph-sdk client. Seven LLM providers are supported out of the box — OpenAI, Anthropic Claude, Google Gemini, Fireworks AI, Groq, Azure OpenAI, and local Ollama models — with Supabase handling authentication and data persistence. Deploy via Docker or build from source. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 2,100 GitHub stars in its first month and benchmarked at 30-75% lower cost than Claude Managed Agents on enterprise task suites, TrueForge is the open-source agent harness that provides the complete runtime layer for turning any LLM into a working production agent on your own infrastructure. The TypeScript server runs the full execution loop — streaming every step, routing tool calls through MCP servers with centralized header-auth and in-chat OAuth, delegating parallelizable work to isolated subagents, and pausing for human approval on sensitive actions. Context engineering keeps token costs low: deferred tool-schema loading delays MCP schemas until invoked, large-result offloading moves oversized outputs to files, Code Mode processes structured data through sandboxed execution, and automatic compaction summarizes older history at a configurable 50,000-token threshold while preserving the full transcript. The sandbox-as-a-tool architecture provisions isolated Daytona environments only when code execution is required, allowing one server to run many concurrent agents without idle overhead. Agents are configured from shipped YAML catalogs of models, MCP servers, git-backed SKILL.md instruction packs, and sandbox providers, then saved to an Agents Library accessible via the chat UI, TypeScript SDK, or embeddable React UI SDK. Run locally with SQLite via a single npx command, or deploy for teams with Docker Compose or Helm using Postgres and Redis with OIDC authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

The first AI-enabled open-source Human Capital Management system built for the agentic era — not a legacy HRMS with AI features bolted on, but a platform architected from the ground up with native MCP, A2A, and WebMCP protocols enabling any LLM client to query employee records, create calendar entries, and orchestrate multi-step HR workflows. Built on the battle-tested SuiteCRM/SugarCRM CE foundation and extended with 17 dedicated HR modules — recruitment pipeline with candidate scoring, onboarding checklists, competency matrices, employment history tracking, leave management with accrual policies, time and attendance, resource booking, travel and expense reporting, workplace management, performance evaluations, job description builder, employer branding campaigns, offboarding workflows, and a configurable analytics engine — all controlled through granular role-based permissions. The integrated LangGraph-powered AI agent operates with human-in-the-loop confirmation before mutating data, while the MCP server layer exposes structured HR operations to Claude Desktop, GitHub Copilot, and any MCP-compatible client. Native REST API enables integration with SAP, Workday, and custom applications. Mobile apps for iOS and Android provide field access to employee data and approvals. Runs on Apache2 with PHP 8.2, MySQL 8.0 or MariaDB, and ElasticSearch 7.10+ for full-text search and list indexing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3 licensed.

Product Hunt's Maker of the Year: Animockup delivers an alternative to expensive motion graphics tools for creating animated product teaser videos entirely in the browser. The FabricJS canvas engine provides a fully interactive editing surface where you import product videos or screenshots, place them inside device mockups ranging from iPhones and MacBooks to browser windows and smartwatches, and customize everything from background gradients to overlay text positioning. Anime.js powers the animation system with configurable start and end transitions, easing curves, and duration controls that produce smooth entrance and exit effects without timeline editors or keyframe knowledge. The built-in FFMPEG.wasm pipeline handles all video processing client-side — no server-side rendering required — exporting finished teasers to WebM, MP4, or GIF at custom framerates and resolutions up to 4K. The crop and reposition tool lets you precisely fit product footage into any device screen regardless of aspect ratio differences. Twenty-plus device frames cover phones, tablets, laptops, desktops, watches, and generic browser windows for maximum versatility. Firebase authentication handles user sessions while the optional Paddle integration manages subscriptions — or remove both for a fully free deployment. Self-hosting requires only a static web server with optional PHP for the payment webhook endpoint. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Paste one SQL query result into a browser and get an interactive entity-relationship diagram instantly, with no installations, no credentials, and no account required. ChartDB's "Smart Query" runs a single statement in your existing database client that exports table definitions, relationships, indexes, and column types as JSON metadata, meaning the application never touches your database passwords. The canvas renders draggable entities with cardinality markers, collapsible grouping areas, and sticky notes for documentation. AI-powered DDL export generates migration scripts between dialect pairs like PostgreSQL to MySQL or SQLite to CockroachDB, analyzing your schema to produce target-specific DDL with correct type mappings and constraint translations. Import paths cover Smart Query JSON, raw DDL scripts, and DBML files from tools like dbdiagram.io. The AI layer connects to OpenAI or any compatible inference server including local vLLM instances running models like Qwen2.5-32B. Database coverage includes PostgreSQL (with Supabase and Timescale extensions), MySQL, SQL Server, MariaDB, SQLite (with Cloudflare D1), CockroachDB, ClickHouse, and Oracle. Exports to SVG with inline styles or SQL DDL in any target dialect. Ships as a React/Vite frontend behind Nginx in Docker, deployable on RepoCloud with dedicated VPS resources under the AGPL-3.0 license.

Your AI coding agent has your API keys in its environment and unrestricted network access, which means one prompt injection away from sending those secrets anywhere. Pipelock closes that gap by sitting as a proxy between your agents and every outbound connection, scanning the actual content of HTTP, WebSocket, MCP, and Agent-to-Agent traffic before it leaves your server. An 11-layer scanner pipeline checks every request against 62 credential patterns covering AWS, GCP, Azure, GitHub, OpenAI, Anthropic, SSH keys, and database URLs, then inspects every response for prompt injection using 29 detection patterns with six-pass normalization that catches base64-encoded, leetspeak, and whitespace-obfuscated payloads. The MCP proxy wraps any Model Context Protocol server (stdio, HTTP, or WebSocket) with bidirectional scanning that detects tool description poisoning and mid-session rug-pull changes via SHA-256 fingerprinting. Every scanning decision produces a cryptographically signed action receipt that third parties can verify offline without trusting the agent or the vendor. The Operator Console provides a web dashboard for reviewing evidence scorecards, receipt timelines, agent sessions, enforcement decisions, and fleet posture at a glance. Cross-request taint tracking catches slow-drip exfiltration attempts that spread a secret across multiple calls. Canary tokens plant synthetic secrets that trip alerts the moment an agent tries to exfiltrate them. Pre-built Prometheus metrics and a Grafana dashboard provide real-time visibility into traffic volumes and block rates. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

CubeSandbox gives every AI agent its own hardware-isolated MicroVM with a dedicated Linux kernel — not a shared-kernel container but a true KVM virtual machine — booting in under 60ms with less than 5MB of memory overhead per instance, enabling thousands of concurrent sandboxes on a single server via kernel sharing and Copy-on-Write memory. The Rust-built CubeProxy exposes an E2B SDK-compatible REST API on Axum, so existing E2B Cloud applications switch by changing one environment variable with zero client code changes. CubeMaster orchestrates cluster-level scheduling in Go while Cubelet manages node-local sandbox lifecycles including create, run, pause, resume, snapshot, and destroy operations. CubeVS, the eBPF-powered network layer, enforces per-sandbox isolation with LPM trie-based egress policies entirely in kernel space — no userspace context switches — while CubeEgress provides an L7 security proxy with per-domain, per-path, and per-method allowlists plus automatic credential injection that keeps secrets invisible to sandbox code. Hundred-millisecond-granularity snapshots enable checkpoint, rollback, and parallel fork from any saved state. The volume framework supports E2B-compatible pluggable storage with independent lifecycle and cross-sandbox sharing. Production deployment uses Terraform on Tencent Cloud or Helm charts on Kubernetes, K3s, or TKE, with full ARM64 support alongside x86_64 and AutoPause/AutoResume for cost optimization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With nearly 8,000 GitHub stars since its December 2024 launch, Kaneo has rapidly gained traction as the minimalist alternative to bloated project management platforms like Jira and Linear. Built on TypeScript with React and Hono, the interface strips away complexity to focus on execution — plan in list view, track in kanban board, and schedule on interactive Gantt chart timelines where dragging bar handles adjusts start and due dates with optimistic UI updates. Native GitHub integration synchronizes issues bidirectionally, links pull requests to tasks, and keeps product planning aligned with development execution without context switching. The built-in Model Context Protocol server at /api/mcp enables AI tools like Claude and Cursor to manage tasks, projects, and labels directly, while the official @kaneo/mcp npm package provides stdio access for local MCP clients. Authentication supports password, magic link, GitHub OAuth, and Google sign-in with organization-level access management. Rich text editing for task descriptions and comments, label-based initiative grouping, priority levels, assignee management, and due date tracking provide focused planning without ceremony. Deploy with the drim CLI for automatic HTTPS and database setup, Docker Compose for custom configurations, or Helm charts for Kubernetes clusters — all requiring just 2GB RAM and PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 14,000 GitHub stars and enterprise adoption by security-conscious organizations, Coder transforms how development teams provision, manage, and secure their coding environments. Every workspace is defined as a Terraform template, meaning infrastructure engineers can standardize development environments across EC2 instances, Kubernetes pods, Docker containers, or any combination, while developers get self-service provisioning that launches in seconds rather than days of manual setup. The WireGuard-based networking layer establishes encrypted tunnels between developer machines and remote workspaces, providing low-latency access without exposing ports or configuring VPN concentrators. Automatic idle detection shuts down unused workspaces after configurable periods, directly reducing cloud compute costs for organizations running hundreds of developer environments. The Coder Agents feature introduces native AI coding capabilities where the agent loop executes entirely within the control plane on self-hosted infrastructure, keeping LLM API credentials out of individual workspaces and eliminating credential exfiltration risks. Centralized model governance allows platform teams to approve specific AI providers and models, set per-user spend limits, and maintain complete audit logs of all prompts, tool calls, and agent activity. IDE integration supports VS Code through a dedicated extension, JetBrains IDEs via Gateway and Toolbox plugins, and browser-based code-server for web access. The template registry provides pre-built configurations for common development stacks. DevContainer support builds environments from standard devcontainer.json specifications. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Nearly two decades running engineering organizations: Redmine is the veteran open-source project management and issue tracker, a Ruby on Rails application (GPLv2) still in active development. Its core strength is configurability: define your own trackers (bug, feature, task, or anything else), issue statuses, and role-based workflows that control exactly which transitions each role may perform, then extend records with custom fields of every type. Issues support subtasks, relations (blocks, precedes, duplicates), watchers, categories, and full journaled history, with saved custom queries and cross-project filtering for slicing the backlog any way you need. Around the tracker sit Gantt charts and calendars, a roadmap driven by versions, per-project wikis, forums, news, and document repositories, plus time tracking with estimated versus spent hours and activity-based reporting. Multi-project support runs deep - subprojects, per-project modules, and granular role-based permissions - and repository integration (Git, Subversion, Mercurial) links commits to issues automatically. Email notifications, inbound email-to-issue creation, LDAP authentication, a REST API, and a large plugin and theme ecosystem round it out. Recent 6.x releases brought substantial query and rendering optimizations. Self-hosting keeps your entire project history in your own database, free of per-seat licensing.