Open Source App Cloud Marketplace

The leading open-source headless CMS with over 72,800 GitHub stars and more than 20 million npm downloads, Strapi has powered content APIs for thousands of organizations since its creation in 2015, providing a complete backend for websites, mobile applications, IoT devices, and any frontend framework through auto-generated REST and GraphQL endpoints. The visual Content-Type Builder lets editors define collections, single types, components, dynamic zones, and relations without code, while Strapi AI introduced in 2026 generates complete content schemas from natural language descriptions, Figma file uploads, or existing JavaScript application code analysis. Version 5 rewrote the platform with a TypeScript-first architecture, replacing the Entity Service with the Document Service API, switching admin panel builds from Webpack to Vite, and integrating internationalization directly into core with unlimited locale support. Database flexibility spans PostgreSQL, MySQL, MariaDB, and SQLite with automatic migration handling. The media library manages uploads to local storage, Amazon S3, or Cloudinary with image optimization and responsive formats. Granular role-based access control defines permissions per content type, field, and locale. The plugin marketplace extends functionality with GraphQL, SEO, email, custom fields, and community contributions, while lifecycle hooks, custom controllers, and middleware enable arbitrary backend logic. Draft and publish workflows, webhooks for external system integration, API token authentication, data import and export, and CRON job scheduling round out a platform that handles content operations from prototype to production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Why split your entertainment life across half a dozen siloed apps when Floppy tracks every movie, television episode, anime season, book, comic, video game, board game, album, and podcast in one unified self-hosted library? A configurable home dashboard shows exactly how much runtime remains in your current shows alongside personalized recommendation rows driven by your genre, studio, cast, and tag history. Music and podcasts are first-class citizens backed by MusicBrainz discography metadata, track-level scoring, Last.fm scrobble polling, and live Pocket Casts episode synchronization. Collectors can catalog physical and digital media ownership down to the exact disc format, video resolution, HDR standard, audio codec, and bitrate, complete with automated Plex collection syncing. Live webhooks and scheduled jobs connect directly to Plex, Jellyfin, Emby, Audiobookshelf, Sonarr, Radarr, and Seerr so watches, listens, and library additions log themselves automatically. You can curate public or private lists with programmable smart-list rules, RSS and JSON feeds, Trakt watchlist imports, and barcode ISBN scanning for physical books. Recap-style statistics let you compare custom date ranges across reading streaks, pages read, listening hours, and top actors or authors, while a REST API and built-in Model Context Protocol server power custom automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Built for e-ink screens, Tesserae composes calm wall dashboards from your calendar, weather, and Home Assistant data in a browser, then renders each frame at the panel's exact resolution. Lay out pages as a grid of cells or on a free canvas of widgets, text, and shapes, with a live preview. What you see is what paints. Dozens of bundled widgets cover weather, calendars, clocks, news, to-do lists, and photos, and a community catalog adds more widgets, themes, and templates. Frames are dithered to each panel's measured palette, so photos and gradients stay clean on Spectra 6 color, mono, and grayscale screens. One server drives a whole fleet. Each panel keeps its own dashboards, schedules, and rotations, and smart sync renders just before a battery panel wakes while quiet hours let it sleep overnight. Seeed reTerminal and XIAO panels flash from the browser, and Pimoroni Inky, Waveshare, M5Stack, TRMNL-compatible devices, and KOReader Kindles and Kobos work too. Inside Home Assistant it runs as a sidebar App. Home Assistant widgets show entities, history, energy, and cameras, and MQTT discovery turns each panel into a device with its frame, battery level, and signal. No account is needed, and update checks stay off unless you opt in. Ask Claude or any MCP client to lay out a dashboard, check a preview, and push it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

CubeSandbox gives every AI agent its own hardware-isolated MicroVM with a dedicated Linux kernel — not a shared-kernel container but a true KVM virtual machine — booting in under 60ms with less than 5MB of memory overhead per instance, enabling thousands of concurrent sandboxes on a single server via kernel sharing and Copy-on-Write memory. The Rust-built CubeProxy exposes an E2B SDK-compatible REST API on Axum, so existing E2B Cloud applications switch by changing one environment variable with zero client code changes. CubeMaster orchestrates cluster-level scheduling in Go while Cubelet manages node-local sandbox lifecycles including create, run, pause, resume, snapshot, and destroy operations. CubeVS, the eBPF-powered network layer, enforces per-sandbox isolation with LPM trie-based egress policies entirely in kernel space — no userspace context switches — while CubeEgress provides an L7 security proxy with per-domain, per-path, and per-method allowlists plus automatic credential injection that keeps secrets invisible to sandbox code. Hundred-millisecond-granularity snapshots enable checkpoint, rollback, and parallel fork from any saved state. The volume framework supports E2B-compatible pluggable storage with independent lifecycle and cross-sandbox sharing. Production deployment uses Terraform on Tencent Cloud or Helm charts on Kubernetes, K3s, or TKE, with full ARM64 support alongside x86_64 and AutoPause/AutoResume for cost optimization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Authentication that lives inside your application rather than behind a redirect to an external identity provider - SuperTokens takes a fundamentally different architecture from Auth0 and AWS Cognito. Three tiers make that work - frontend SDKs (React, Angular, Vue, vanilla JS, React Native) render overridable login UI and manage tokens; backend SDKs (Node.js, Python, Go) expose auth endpoints on your own API domain; and SuperTokens Core, the piece you host here, is the stateless HTTP service handling core auth logic, password hashing, token signing, and database operations against PostgreSQL. The recipe system keeps features decoupled: use email/password, social login, passwordless (magic links, OTP), phone-password, multi-factor authentication (TOTP, WebAuthn), user roles, and microservice auth - individually or combined; you can even use SuperTokens purely for session management alongside another login provider. Sessions are where it shines: rotating refresh tokens with theft detection, automatic access-token refresh, CSRF protection, and secure cookie handling out of the box - the details that become vulnerabilities when hand-rolled. Verification happens locally in your backend via cached JWT signing keys, so the Core stays off the hot path. Self-hosted means no user limits, free forever, with all user data in your database. Apache-licensed.

Nowen Note is a self-hosted knowledge base where your notes, tasks, daily journals, and mind maps live in one private workspace you control. One tree holds folders, rich-text documents, and Markdown notes side by side, with drag-and-drop ordering, unlimited nesting, colored tags, pinning, and full-text search across everything. Each note can switch between a rich-text editor and Markdown with live preview, split view, outlines, tables, code blocks, math formulas, diagrams, comments, and version history. Connect the AI provider you prefer, such as an OpenAI-compatible API, Gemini, DeepSeek, or local Ollama, to continue drafts, rewrite passages, translate, summarize, and ask questions answered from your own notes. Tasks get list, board, calendar, and timeline views with dependencies, recurring rules, reminders, and templates, while daily journals capture short entries, moods, and photos and roll them into AI weekly and monthly reviews. Teammates edit together in real time, and folder-level permissions, passwords, allow and deny rules, share links with expiry dates, and guest comments decide exactly who sees what. Imports arrive from Obsidian, SiYuan, Word documents, web pages, and plain Markdown, attachments can live on local disk or S3-compatible storage, and scheduled backups travel to email or WebDAV. Keep working offline with a cached workspace that syncs when you reconnect, clip pages from the browser extension, and connect other tools through the OpenAPI, SDK, webhooks, and MCP server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

An open-source application performance monitoring platform for microservices, Kubernetes, and service meshes, Apache SkyWalking draws the live service map and ties slow requests to their traces, logs, and metrics. Agents cover Java, .NET Core, PHP, Node.js, Go, Lua, Rust, C++, browser JavaScript, and Python, and OpenTelemetry, Zipkin, Prometheus, Zabbix, and Telegraf data can be ingested too. Start at the service topology map, follow a request through the trace waterfall, then drill into the instance and its API dependencies. When the cause is inside the code, trace profiling, async-profiler, Go pprof, eBPF, and network profiling render flame graphs and process graphs in the same console. The Rover eBPF agent profiles Kubernetes workloads for CPU and network problems, and Istio and Envoy service meshes, including Istio Ambient, report into the same dashboards. Alarm rules target a service, deployment, or API, and alarms and telemetry can be forwarded to third-party systems. Metric and log analysis rules hot-update at runtime without a restart, and a live debugger shows what each rule stage receives and produces. An AI assistant answers plain-language questions with charts, topology, and traces from live data, using an OpenAI-compatible or Amazon Bedrock model you configure, and an MCP connection serves your own AI client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Twitch and YouTube Live, replaced by infrastructure you control: Owncast is a self-hosted live streaming and chat server. Point OBS, Streamlabs, or any RTMP-capable broadcaster at the server's ingest port, and Owncast transcodes the feed with FFmpeg into HLS with multiple quality variants, playing it in a built-in web page with a real-time chat beside it. Chat supports anonymous participation, custom emotes, and moderation tools - message removal, user bans and suspensions - with optional authentication via IndieAuth or a Fediverse account. ActivityPub integration puts the stream on the Fediverse: viewers on Mastodon and compatible services can follow a channel and get notified the moment it goes live. Video delivery can come straight off the server or offload HLS segments to S3-compatible object storage so a modest VPS handles thousands of concurrent viewers while only managing ingest and chat. The backend is a single Go binary with a React frontend - no accounts platform, no database server, no dependency stack - and the player embeds in any website. MIT-licensed, with roughly 9k GitHub stars, zero platform fees, and no algorithm or takedown policy between you and your audience.

WechRSS brings WeChat Official Accounts back into your RSS reader, turning accounts that normally live inside a closed app into ordinary feeds you control. Paste any article link from an account and the tool identifies the publisher automatically, without hunting for obscure account parameters. Connect WeChat Reading by scanning a QR code in the web interface, and the session renews itself when possible so subscriptions keep flowing. Each account gets its own independent feed with its own sync schedule, item count, and on or off switch, so noisy publishers can be slowed down and favourites checked more often. A background scheduler keeps article titles, publication times, covers, and summaries up to date, with sync attempts, successes, and the latest new article all visible at a glance. Everything is stored locally, so your subscription list and credentials never sit on someone else's server. A first-time subscription wizard walks you from QR login to seeing the first article in your reader, saving progress if you get interrupted. Reader-specific links can be generated per account, letting a cloud reader fetch a feed without handing out management access. Health diagnostics flag expired logins, verification requests, and long sync gaps with concrete recovery steps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every page in a DokuWiki knowledge base is just a plain text file on disk, so a team wiki can run for years on modest hardware with no database to feed, ever. Writers edit pages in a clean, readable syntax, fix just one section of a long document at a time, and lean on the toolbar, breadcrumbs, automatic tables of contents, and conflict locking to keep collaboration painless. Every change is kept as a revision with colored side-by-side diffs, recent-changes feeds go out over RSS, and an index-based full-text search finds content across thousands of pages in milliseconds. Namespaces organize content into a browsable tree, while built-in access control lists decide per page or per branch who may read, edit, upload, or administer, with logins checked against LDAP and other backends. Media uploads embed straight into pages, configuration happens in the browser, and the whole installation backs up by copying a folder, which makes migrations and disaster recovery almost boringly simple. When the basics stop being enough, more than twelve hundred community plugins and a hundred templates add galleries, multilingual structures, diagrams, and data tables without changing how the wiki itself works. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

With over 7,000 GitHub stars and continuous development since 2017 by former Intel engineer Ylian Saint-Hilaire, MeshCentral has become the go-to self-hosted alternative to ConnectWise Control and Splashtop for managing devices remotely without per-seat licensing fees. The Node.js server installs via a single npm command and manages Windows, macOS, Linux, and FreeBSD endpoints through lightweight agents that maintain persistent WebSocket connections for real-time remote desktop, terminal access, and file transfer directly in the browser. Intel AMT integration provides out-of-band hardware management including power control and BIOS access even when the operating system is unresponsive. Device groups organize endpoints by location, customer, or function with granular role-based access control for multi-technician environments. Session recording captures remote desktop interactions for compliance auditing, while Wake-on-LAN powers on machines remotely across subnets. The server supports MongoDB for production deployments handling thousands of agents or the embedded NeDB for smaller setups under 200 devices, with a single 8GB VPS comfortably managing 1,500 concurrent agents. Security features include mandatory TLS with automatic Let's Encrypt certificate provisioning, multi-factor authentication via TOTP and FIDO2, SAML-based single sign-on, IP filtering, and HashiCorp Vault integration for secrets management. The web console provides real-time device monitoring with hardware and software inventory, network topology visualization, and customizable branding. TacticalRMM uses MeshCentral as its remote access layer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Kept is a self-hosted home inventory that answers where things are, what they are, and what is due. Locations, rooms, shelves, and boxes nest inside each other, so moving a box moves everything in it, and each location can be viewed as a list, a grid, or a 3D map with pins for low stock, loans, and due items. Every thing gets a short ID and a QR code for label sheets or roll printers, and scanning a label opens the box. Capture a thing, receipt, or whole room from the installable phone web app, offline too; an AI provider you choose, including Ollama, then suggests details for you to confirm. Receipts, manuals, and warranties attach to items, reminders arrive in the app, by email, by push, or in a calendar feed, and an insurance report exports photos, serials, and receipts. Lending tracking, vehicle readings and services, moving-house box lists, and stocktakes cover the rest of the household, with shared locations and roles for everyone you live with. An assistant answers questions like where the HDMI cable is, and an MCP endpoint lets Claude or other AI agents add and move things, with changes waiting for your approval. Nightly backups and imports from Homebox and CSV round it out. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Autonomous red team execution without manual script coordination is what PentaGI delivers through a multi-agent penetration testing platform engineered for automated security assessments. Security engineers configure testing scopes, target IP ranges, domain lists, and rules of engagement through an interactive web console with real-time execution graphs. Autonomous agent personas break down high-level assessment goals into discrete tactical phases, orchestrating network port discovery, service banner fingerprinting, web application crawling, and CVE verification. Specialized agents query integrated Graphiti knowledge graphs and local vulnerability repositories to synthesize attack paths, validate exploitability, and confirm finding veracity before issuing alerts. Operators monitor live agent terminal streams, inspect sandboxed tool executions, and adjust active LLM provider routes across OpenAI, Anthropic, or local Ollama endpoints. The template editor allows red teams to compose reusable testing playbooks with customizable security prompt chains, safety constraints, and automated remediation reporting. Audit logs capture full command histories, raw tool outputs, and LLM reasoning steps to generate compliance-ready technical documentation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by 56,000+ GitHub stars and over 240 million Docker pulls, LiteLLM delivers the open-source AI gateway trusted by Netflix, Lemonade, Rocket Money, and thousands of engineering teams to route every LLM request through one unified API. The Rust-core gateway adds sub-millisecond overhead per request with 8ms P95 latency at 1,000 RPS, 15x throughput improvement and 11x lower memory footprint compared to Python-only proxies. A single OpenAI-compatible endpoint connects to 100+ providers and 1,800+ models spanning OpenAI, Anthropic, Google Gemini, AWS Bedrock, Azure OpenAI, Vertex AI, Hugging Face, vLLM, Nvidia NIM, Ollama, and Mistral with day-zero support for new model releases. The Auto Router V2 classifies request complexity across four tiers using rule-based scoring, semantic keyword matching, and adaptive Thompson sampling to route each request to the most cost-effective model without API calls or training data. Virtual API keys enable multi-tenant governance with per-team, per-user, and per-project cost tracking, budget caps with automatic fallback rerouting, and role-based access control. Built-in guardrails provide PII masking, prompt injection detection, and model-graded evaluation before requests reach providers. The Agent Gateway extends routing from model calls to agent workflows with MCP server integration. Observability integrates with Langfuse, Arize Phoenix, OpenTelemetry, and MLflow for complete request tracing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Hoarder (now Karakeep) is a bookmark manager that actually fights link rot: every page you save gets archived at capture time using Monolith, so the content survives even when the original URL dies. Beyond archival, an AI layer powered by OpenAI or local Ollama models auto-tags everything by analyzing page content. Prefer full privacy? Ollama keeps all inference on your server with zero external API calls. Full-text search through Meilisearch indexes the actual scraped content of every bookmark, not just titles and tags, so you find articles by what they say rather than labels you half-remember. Save links with automatic metadata extraction, plain text notes, uploaded images, and PDF documents, all organized into shareable lists with collaborative access. Browser extensions for Chrome and Firefox make saving a one-click operation from any page. Migrating is painless with importers for Chrome, Pocket, Linkwarden, Omnivore, and Tab Session Manager. LLM summarization condenses saved pages into brief overviews for quick scanning. The AI layer is entirely optional: Hoarder works perfectly as a manual bookmark manager, with intelligence adding convenience rather than imposing a requirement. SSO integration and responsive dark mode round out the package.

Sign up for a new service and you face a familiar choice: hand over your real email and get spam-listed forever, or generate a throwaway alias that dies when you close the tab. AliasVault eliminates that trade-off by combining a password manager with a built-in email server, so every website gets a unique identity (random email, generated name, strong password) and incoming emails land directly in your encrypted vault rather than your primary inbox. Creating a new alias takes one click: the system generates a random address on your configured domain, a fake identity with name and birthdate, and a cryptographically strong password, all stored in a zero-knowledge encrypted vault that even the server administrator cannot read. Browser extensions for Chrome, Firefox, Edge, Safari, and Brave detect login forms and autofill credentials or prompt you to create a new alias on the spot. Native iOS and Android apps with biometric unlock provide mobile access to your vault and integrate with the operating system's autofill framework. The built-in TOTP authenticator generates time-based one-time codes without needing a separate app. Import existing credentials from other password managers through standard export formats, and export your vault data at any time for full portability. Self-hosting via Docker with your own email domain gives you complete control over where alias mail is received and stored, with no third-party dependencies. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 37,800 GitHub stars and active development since its first release in 2008, ERPNext is the most-starred open-source ERP system — delivering accounting, inventory management, manufacturing, CRM, project tracking, asset management, HR, and point-of-sale capabilities through a unified web interface built on the Frappe Framework's metadata-driven architecture. The accounting module handles multi-company consolidation, multi-currency transactions, tax templates for GST and VAT, bank reconciliation, and automated journal entries with real-time profit and loss, balance sheet, and cash flow reporting. Manufacturing covers production planning with multi-level bill of materials, work order scheduling, capacity planning, subcontracting, and quality inspection at each production stage. Inventory tracks stock across multiple warehouses with batch and serial number tracing, automatic reorder levels, landed cost calculations, and perpetual inventory valuation using FIFO or moving average methods. The CRM module manages leads, opportunities, and customer communication with email integration, while project management tracks tasks, timesheets, and Gantt-based scheduling with budget controls. Custom applications extend functionality through the Frappe ecosystem without forking the core codebase, and the REST API enables integration with payment gateways, shipping providers, and third-party services. Deployable via Docker Compose or the bench CLI tool with MariaDB and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

A personal to-do list that scales to team project management: Vikunja is an open-source task manager that grows with the work. Every project can be viewed four ways - classic list, drag-and-drop Kanban board, Gantt chart for timeline planning, and a spreadsheet-style table - so a project manager watches the Gantt while developers work the board, on the same data. Tasks carry the full attribute set: labels, priorities, due dates and reminders, recurring schedules, subtasks and task relations, file attachments, assignees, and comments, and Quick Add Magic parses natural-language input like dates and labels typed inline. Projects share with team members or via links, and saved filters slice tasks across projects. Built-in CalDAV support (VTODO) syncs tasks bidirectionally with clients like Thunderbird, DAVx5, and iOS Reminders, and one-click importers migrate from Todoist, Trello, and Microsoft To-Do. Nothing is metered - unlimited projects, tasks, filters, and attachments. A single Go binary with a Vue frontend runs against SQLite, MySQL, or PostgreSQL, exposes a full REST API, and works as an installable PWA on mobile. AGPLv3-licensed.