Open Source App Cloud Marketplace

Diaspora lets you run your own social network node that federates with thousands of others, creating a network with no central authority and no advertising engine mining your behavior. The defining feature is aspect-based sharing: organize contacts into groups like Family, Work, and Close Friends, then control exactly who sees each post with granularity that mainstream platforms have never matched. Hashtag-based discovery connects conversations across the entire federation regardless of which pod participants call home, building communities around topics rather than algorithmic engagement bait. The Ruby on Rails backend (now running on Puma with Sidekiq workers instead of the heavier Unicorn configuration) handles federation delivery, media processing, and notifications efficiently. Photo albums, video embedding, Markdown posts, mentions, reactions, and resharing provide familiar social primitives for rich communication. Cross-posting bridges to Twitter and Tumblr maintain your presence on legacy networks while your canonical data lives on your own infrastructure. With 13,700+ GitHub stars and 270+ contributors since its 2010 launch, Diaspora proved early that social media can work without surveillance capitalism. The Docker Compose deployment runs the application alongside PostgreSQL, Redis, Sidekiq workers, and Nginx, providing a production-ready pod for your community.

Admin panels, database GUIs, dashboards, approval flows, customer support consoles - Appsmith builds the internal tools your team keeps postponing, on an open-source low-code platform. The UI assembles from 45+ drag-and-drop widgets - tables with server-side pagination and inline editing, charts, forms, lists, buttons - which bind to data through {{ }} JavaScript expressions anywhere in the editor. Datasources cover PostgreSQL, MySQL, MongoDB, MS SQL, Redis, Snowflake, and more, plus any REST or GraphQL API, with SaaS integrations and AI query support for prompt-based steps inside apps. When the widget library falls short, custom widgets are plain JavaScript, HTML, and CSS, and external JS libraries can be imported, which keeps the platform extensible where pure no-code tools hit walls. Git-based version control enables branch-based collaboration, review, and rollback of app definitions. Queries and JS objects hold the business logic layer between datasources and UI. Self-hosted via Docker or Kubernetes, with role-based access control for published apps.

Credentials sitting forever in email threads and chat scrollback - Password Pusher solves that everyday security failure. Instead of pasting a password into Slack, you push it - a password, note, file, URL, or QR code - and share a unique one-time link that expires after a set number of views, a time limit, or both. Content is encrypted at rest with AES-GCM under a configurable master key, optionally guarded by a passphrase, and permanently deleted from the database the moment it expires; a retrieval-step option keeps URL-scanning bots from consuming views. Full audit logs record when each link was created and viewed (and by whom, with logins), and TOTP two-factor authentication can be required instance-wide. The delivery page is deliberately unbranded - no logos or confusing links for recipients - and the interface ships in 31 languages with light and dark themes. Automation runs through a JSON API (v2), an official CLI for pushing and expiring secrets from the terminal, a Chrome extension, and a catalog of third-party integrations. Apache-2.0 licensed Ruby on Rails, deployable via Docker, Kubernetes, or Helm, with SQLite or PostgreSQL storage - the sysadmin staple for sending credentials that clean up after themselves.

Transforming fragmented research notes, daily technical logs, and project documentation into an interconnected knowledge base is what NoteDiscovery delivers for privacy-conscious teams and researchers. Writers compose rich documents using a dual-pane editor that renders MathJax equations, interactive task lists, and dynamic Mermaid sequence diagrams side by side with raw text. The interactive knowledge graph maps semantic relationships across notebooks, allowing researchers to explore backlinks, uncover hidden topical connections, and navigate complex idea webs visually. Team members sketch architecture diagrams and wireframes directly inside note canvases using the integrated drawing tool, saving revisions as embedded image layers without external editors. The platform organizes thoughts through flexible tag hierarchies, nested folder trees, and reusable document templates equipped with automatic date and variable substitutions. Autonomous coding assistants and language models query documentation, create structured meeting summaries, and update project indexes directly through the native Model Context Protocol server. Built-in export tools convert notebook collections into standalone HTML packages, printable documents, or portable Markdown archives for offline archiving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 77,000 GitHub stars accumulated in under five months since its March 2026 launch, Paperclip has become the default control plane for teams running multiple AI agents in production. Rather than juggling dozens of terminal tabs with Claude Code sessions, Codex instances, and Gemini CLI workers, Paperclip organizes all agents into a company structure with org charts, reporting lines, role-based permissions, and per-agent monthly budgets that trigger hard-stops when exceeded. The platform supports any runtime through its adapter system — Process adapters manage local CLI agents like Claude Code, Codex, Cursor, Pi, and OpenCode as child processes, while HTTP adapters trigger remote agents via webhooks to OpenClaw, serverless platforms, or custom endpoints. Heartbeat-based execution wakes agents on configurable schedules, injecting goal context, budget state, and workspace paths directly into the invocation payload. The Work and Task System provides atomic checkout with execution locks, first-class blocker dependencies, and structured work products to eliminate duplicate effort. Governance features include approval workflows, decision tracking, emergency stops, and full audit trails tracing every mutation to an actor. Deployment runs as a single Node.js process with embedded PostgreSQL locally or scales to external Postgres for production, installable in one command via npx paperclipai onboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Nowen Reader turns a NAS folder of manga and novels into a private library you can browse, organize, and read from anywhere, without handing your collection to a cloud service. Drop comic archives and ebook files into watched folders and automatic scanning brings them into the library, detecting duplicates and cleaning up invalid entries along the way. Metadata arrives from AniList, Bangumi, MangaDex, MangaUpdates, and Kitsu, so covers, authors, and series information fill themselves in instead of being typed by hand. Read comics in single page, double page, or vertical webtoon modes with image filters and bookmarks, and pick up novels chapter by chapter where you left off. Reading status follows each user, with want to read, currently reading, and finished shelves plus personal ratings, favorites, and progress statistics. OPDS feeds stream pages directly to KOReader, Moon+ Reader, and other compatible apps, so your e-reader pulls from the same library. Optional AI assistance can suggest tags, summarize chapters, analyze covers, and translate pages. Libraries can be public, private, or shared with user groups, with per-library permissions for households. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Log a date, amount, and category; get a clean monthly pie chart and a cashflow strip showing income, expenses, and net balance - ExpenseOwl is expense tracking stripped to what actually matters. The MIT-licensed Go application deliberately is not a budgeting system - no envelopes, no accounts, no double-entry, no bank sync - because its author found tools like Firefly III and Actual too heavy for the simple question "where did this month's money go?" The dashboard makes that question fast: click a pie slice to exclude fixed costs like rent and see discretionary spending clearly, then drill into a chronological table view to inspect or delete individual transactions. Recurring transactions handle salaries and subscriptions automatically, optional tags add a second classification axis, and settings cover custom categories, currency symbol, and a configurable month start date for non-calendar pay cycles. CSV import migrates data from virtually any other tool, and CSV export keeps your data portable. It ships as a self-contained binary and multi-architecture Docker image with zero internet interaction, stores data in flat JSON files by default (PostgreSQL optional), and installs as a PWA on phones. Single-user by design; pair it with an authenticating reverse proxy if exposed publicly.

Arcane gives you a single polished dashboard to manage Docker containers, images, volumes, networks, and Compose projects across unlimited remote hosts. The SvelteKit frontend paired with a Go backend delivers real-time resource monitoring with historical graphs, container lifecycle controls including shell exec and live log streaming, and one-click Docker Compose deployment with Git repository synchronization for version-controlled stack definitions. The manager-agent architecture connects remote environments via Direct TCP on port 3553 or Edge mode where agents initiate outbound gRPC/WebSocket connections through NAT and firewalls without requiring inbound ports, all secured with mTLS certificates. Vulnerability scanning identifies security issues in running container images directly from the interface. The backup system enables scheduled container snapshots with configurable retention for disaster recovery. Network and volume administration includes visual relationship mapping between services, and the responsive interface supports dark/light themes with full mobile optimization and community-driven internationalization via Crowdin. 6,500+ stars and 89 releases since April 2025 reflect a rapid development cadence. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Your documents change every day, and your RAG answers should change with them: Serviette keeps a chat and REST API continuously in sync with the files you point it at, no re-indexing jobs to remember. Point it at a local folder, Google Drive, S3 or MinIO bucket, SharePoint library, or even an FTP or WebDAV share, and edits, additions, and deletions flow into the index in real time. One YAML file, or the interactive wizard, chooses among eight vector databases, from embedded DuckDB with zero setup to pgvector, Qdrant, Milvus, Chroma, Weaviate, Pinecone, or MongoDB Atlas. Text, Office files, PDFs with tables, and scanned images are parsed and answerable by default, with audio and video joining when you add the keys. Embeddings can run fully locally with no credentials, and keyless answers simply quote the retrieved passages with their sources. The indexer and the stateless server scale independently, the server shards across workers with one config line, and both a ChatGPT-style web chat and a versioned /api/v1 retrieval API answer on the same port. A free license key from Pathway activates the engine, and benchmarks cover corpora up to 50 GB of text. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Obscura is the headless browser you point Puppeteer or Playwright at when Chromium feels like renting a truck to fetch a letter. Start the server and your existing automation connects over the usual DevTools protocol, opens pages, clicks, types, waits for selectors, and reads the fully rendered result, JavaScript included. Scrape one page or fan out across many in parallel, evaluating an expression on each and getting structured output back. Capture viewport or full-page screenshots, export PDFs, intercept requests to block or rewrite them, and manage cookies and headers per session. An MCP mode lets AI agents drive the browser as a tool instead of shelling out to scripts. Stealth mode randomizes fingerprints per session, presents realistic browser identity signals, and blocks thousands of known tracker domains before they load. Proxies, persistent storage for cookies and local storage, and robots handling round out the controls for longer crawls. The whole thing starts instantly and sips memory compared with a conventional headless Chrome, so a modest server can keep many more pages in flight. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

FalkorDB is the first queryable property graph database to leverage sparse adjacency matrices and linear algebra for graph traversal, replacing traditional pointer-chasing with GraphBLAS-accelerated computation. Originally the RedisGraph engine, it was relaunched as FalkorDB in 2023 and rewritten from C to Rust in 2026 for improved memory safety and performance. The database supports the OpenCypher query language with proprietary extensions, translating queries into linear algebra expressions that exploit AVX hardware acceleration. Indexing options include full-text search, vector similarity for embedding-based retrieval, and range indexing, while connectivity supports both the RESP protocol for Redis clients and the Bolt protocol for Neo4j-compatible tooling. The GraphRAG SDK enables ingestion of documents in text, PDF, and Markdown formats into knowledge graphs, with schema-guided entity extraction, hybrid retrieval combining vector and graph traversal, relationship expansion, and cited answers for LLM applications. Official client libraries cover Python, Node.js, Java, Rust, Go, PHP, and C#. Multi-tenant support handles over 10,000 concurrent graphs with zero overhead and full isolation. Docker deployment runs the falkordb/falkordb image on ports 6379 for the database server and 3000 for the built-in browser UI, with persistent volume storage and optional authentication. A production falkordb-server image excludes the browser for lighter deployments. On RepoCloud, deploy FalkorDB on a dedicated VPS with root SSH access, persistent storage for your graph data, and complete control over authentication, thread count, and memory configuration, all under the SSPLv1 license.

Machine translation with no Google, no Azure, no per-character billing, and no text leaving your infrastructure: LibreTranslate is a free, open-source translation API that runs entirely on your own server. The engine underneath is Argos Translate, which runs OpenNMT neural models with SentencePiece tokenization and Stanza sentence-boundary detection, all offline. Models install as portable .argosmodel packages covering dozens of languages - English, Spanish, French, German, Chinese, Japanese, Russian, Arabic, Hindi, Portuguese, and many more - and Argos handles automatic pivoting: with es-to-en and en-to-fr installed, it chains them to translate es-to-fr without a direct model. The API is a straightforward HTTP POST to /translate with source and target language codes, returning JSON - simple enough that the ecosystem has clients in every major language and integrations across tools like Weblate and Mastodon. Beyond plain text it translates HTML while preserving markup and handles whole file uploads (documents in, translated documents out), plus automatic language detection when the source is unknown. A clean bundled web UI serves interactive translation for end users, and optional API keys with rate limits control access. AGPL-licensed and trainable with custom models, it is the standard answer when translation must be private, unmetered, and self-contained - GDPR-sensitive text never touches a third party.

Meshlan turns your own Linux server into the control plane for a private virtual LAN that connects remote Windows devices as if they sat on the same router. Devices pair through your server, receive their certificates, and then talk directly to each other over encrypted tunnels whenever NAT allows, using dual-stack hole punching, UPnP, and STUN diagnostics to find a path. When a direct connection is impossible, traffic falls back to relays, and multiple relay nodes are chosen automatically by latency, jitter, packet loss, and health. You can publish a service that only listens on localhost, a local API, a web panel, a database, a game server, to the mesh on a custom port, with direct access or manual approval by its creator. Names stay stable while addresses change: devices answer to names like alice.mesh and services to api.alice.mesh, and an HTTPS gateway serves mesh websites without port numbers. Files move directly between devices over the encrypted link while the server only distributes metadata. The console shows the live topology with P2P and relay paths, latency, and service health, and local history keeps traffic and events for replay with a time slider. Optional AI automation keeps model keys on the server, encrypts context end to end, and asks for your confirmation before changing anything. Signed updates verify and roll back automatically when a health check fails. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

SkillHub gives teams a private, npm-style registry for AI agent skills, so a useful skill package is published once, reviewed, versioned, and installed into a compatible agent from the command line. Upload a package from the web console, the CLI, or the REST API, pick PUBLIC, NAMESPACE_ONLY, or PRIVATE visibility, and track releases with semantic versions plus tags such as beta and stable. Team namespaces keep their own members with Owner, Admin, and Member roles and publishing policies, while full-text search filters by namespace, downloads, ratings, and recency and hides whatever a user may not see. Every submission enters a review queue: namespace admins approve or reject team skills, platform admins decide promotions to the global scope, and each governance action lands in the audit log. A built-in Skill Scanner inspects published packages and shows its report on the skill page, with optional behavioral, LLM, VirusTotal, and Cisco AI Defense engines. Members can star and rate skills, follow download counts, receive notifications, and report problem packages. Skill suites bundle several skills into one versioned collection with an entry skill, scoped API tokens serve the CLI and scripts, and the interface speaks English, Simplified Chinese, Russian, and Korean. Packages live on local disk or S3-compatible storage such as MinIO. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Stalled torrents, malware-laced archives, and failed imports can quietly paralyze an automated media server, and Cleanuparr eliminates those bottlenecks as an autonomous download queue manager and library seeker for the entire Servarr ecosystem. Connecting directly to Sonarr, Radarr, Lidarr, Readarr, Whisparr, Sportarr, and LazyLibrarian alongside qBittorrent, Transmission, Deluge, rTorrent, uTorrent, and SABnzbd, its configurable Queue Cleaner tracks slow transfers, stuck metadata downloads, and import failures using a strike system. Once a problematic download reaches its strike threshold or triggers the Malware Blocker against deceptive .lnk and .zipx payloads, Cleanuparr purges the offending files, blocklists the release, and instructs the media manager to search for a clean replacement. Beyond defensive queue hygiene, the built-in Seeker proactively searches your libraries for missing episodes or movies, hunts for Cutoff Unmet quality upgrades, and tracks Custom Format score distributions over time. Storage administrators can also enforce seeding duration limits, clean up orphaned torrents without breaking active cross-seed hardlinks, and quarantine unclaimed directory files before they consume disk capacity. A live web dashboard visualizes manual intervention alerts, strike histories, and searchable application logs while dispatching instant notifications through Apprise, Discord, Gotify, Notifiarr, Ntfy, Pushover, and Telegram. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Your household's kitchen command center: shared grocery lists that sync in real-time across everyone's phones, a recipe book that imports from 500+ websites with one tap, a weekly meal planner that auto-generates shopping lists, and expense tracking that splits costs between roommates or family members. Native apps for Android, iOS, macOS, Windows, Linux, and web provide partial offline support so the list works even in store dead zones. The recipe-scrapers library with wild mode fallback handles imports from virtually any cooking site, extracting ingredients, steps, and images automatically — then converts recipe ingredients directly to shopping items with a single tap. Smart suggestions learn from your patterns over time, ordering items by your typical store route and recommending frequently purchased products. OpenID Connect authentication supports Google, Apple, Authelia, and custom providers. LLM-powered ingredient parsing uses configurable AI models for intelligent recipe text extraction. A Home Assistant integration enables voice-controlled list management via smart speakers. The REST API with a published Python client library allows third-party automation. Multi-language support covers 30+ languages through Weblate community translations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Baby Buddy is a private self-hosted child care tracker that centralizes feeding sessions, sleep cycles, diaper changes, and developmental health milestones into a collaborative dashboard for parents and caregivers. Caregivers can start quick timers on mobile devices to measure nursing intervals, bottle feedings, naps, and tummy time sessions with single-tap precision. The dashboard automatically calculates daily averages, feeding amounts, and awake windows to help families establish consistent daily sleep and feeding routines. Parents can track diaper changes by recording wetness, stool consistency, and color anomalies to spot digestive health changes early. Physical measurements including weight, height, and head circumference plot directly against World Health Organization growth curves to visualize percentile progression between pediatric visits. Multi-child profiles allow families with twins or multiple young children to switch contexts instantly and monitor individual growth timelines. Granular user permissions let parents invite nannies, babysitters, and relatives with restricted logging permissions while keeping administrative settings private. The built-in REST API and webhook system enable physical smart button clicks and home automation routines to log events instantly without opening a browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-2-Clause licensed.

Drag nodes onto a canvas and ship an LLM app: Flowise is an open-source visual builder for AI agents and LLM applications, written in Node.js on LangChain.js and licensed Apache-2.0. You assemble flows by dragging nodes onto a canvas: models, prompts, memory, vector stores, retrievers, and tools, then wire them together and test in the built-in chat panel. Three builder types cover increasing complexity: Assistant for simple RAG chat over uploaded files, Chatflow for single-agent systems with techniques like rerankers and Graph RAG, and Agentflow for multi-agent orchestration with branching, looping, shared flow state, and human-in-the-loop checkpoints. Over 100 integrations connect data sources, vector databases, and both proprietary and open-source models, plus MCP client and server nodes for standard tool interop. Finished flows are exposed as REST APIs, embedded chat widgets, or via JS and Python SDKs - each flow gets an endpoint the moment it is saved, removing the deployment gap between a working prototype and something your application can call. Execution logs, visual step debugging, and external log streaming trace behavior, while input moderation and rate limiting act as guardrails; RBAC, SSO, and workspaces cover team deployments. Self-hosting keeps prompts, encrypted credentials, and conversation data on your own instance, which matters when flows handle internal documents or customer data - and wiring a model, prompt, memory, and vector store on the canvas replaces the boilerplate a hand-coded LangChain project would need.