Lightpanda is a headless browser built for AI agents and automation that loads and runs web pages without ever drawing them, so crawling, scraping, and agent browsing finish far faster and lighter than in Chrome. You drive it with the tooling you already have: Puppeteer, Playwright, and Chromedp connect over the Chrome DevTools Protocol, Selenium works over WebDriver BiDi, and existing Chrome automation scripts keep running against the new endpoint. Scripts can execute JavaScript on real pages, wait for network activity, read and mutate the DOM, submit forms, and pull structured data out of dynamic sites that plain HTTP clients cannot see. An MCP server mode hands the browser to AI applications as a callable tool, so a model can open pages, follow links, and read content in the middle of an agent workflow. The built-in agent accepts plain-language browsing tasks and can export what it did as PandaScript, a replayable JavaScript file that runs later with no model call at runtime. A fetch command loads one or more URLs and prints the result as HTML or Markdown, which turns page extraction into a single shell step inside data pipelines. In the project's published crawl benchmark it processed pages roughly nine times faster than headless Chrome at a fraction of the memory, so one server can hold many more concurrent browsing sessions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OpeniLink Hub turns a personal WeChat account into a programmable bot platform, with a web console, multi-bot management, and a one-click app marketplace that wires WeChat to Lark, Slack, GitHub, Notion, and twenty other services. Bind accounts by scanning a QR code, then watch every bot's status, expiry window, and message flow from one dashboard. Install marketplace apps without writing code: Lark gains 34 AI-callable tools across calendars, docs, tasks, and meetings, while GitHub brings 36 tools for issues, pull requests, and Actions. Every incoming message fans out in parallel over WebSocket for millisecond pushes, Webhook callbacks to your own servers, and an AI channel that answers through any OpenAI-compatible API. Message tracing follows each message from receipt to delivery, showing exactly which hop stalled when something breaks. Passkey sign-in with fingerprint or hardware keys keeps the console protected, with GitHub and LinuxDo OAuth as alternatives. Reminders, expense tracking, currency conversion, RSS digests, and cron-scheduled pushes run as installable apps, and expiry reminders warn you before the 24-hour reply window closes. Build your own integrations with official SDKs for Go, Node.js, Python, PHP, Java, C#, and Lua, or expose local CLI commands as chat-callable tools with the Runner app. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Portabase takes a zero-trust approach to database backups: lightweight Rust/Tokio agents deploy next to each database, encrypt dumps with AES-GCM before data ever leaves the host, and poll the Next.js control plane outbound every five seconds requiring zero inbound firewall rules. This architecture contains blast radius if the dashboard is compromised while supporting ten engines with stable backup and restore: PostgreSQL 12 through 18, MySQL 5.7 through 9, MariaDB 10 and 11, MongoDB 4 through 8, SQLite 3.x, Redis 2.8+, Valkey 7.2+, Firebird 3.0 through 5.0, Microsoft SQL Server 2017 through 2022 including Azure SQL, and Docker volumes on Engine 20.10+. Encrypted backups store on configurable backends including local filesystems, any S3-compatible provider (AWS, MinIO, RustFS), Google Cloud Storage, and Azure Blob Storage. Cron-based scheduling with Grandfather-Father-Son retention policies automates backup lifecycle management, while on-demand restore targets any compatible server for cross-environment recovery. The CLI installs agents with a single command and auto-updates when new versions ship. A RESTful API with MCP server integration enables automation from CI/CD pipelines and AI agent workflows. Developed by a non-profit under Apache-2.0. 1,270+ stars and 174 releases since October 2024. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console.

Kodus AI automates pull request code review with inline AI comments across GitHub, GitLab, Bitbucket, and Azure DevOps, supporting any LLM provider at cost with zero token markup. The multi-service TypeScript architecture deploys via Docker Compose, running an API server, background worker, webhooks service, and React dashboard backed by PostgreSQL with pgvector, MongoDB, and RabbitMQ. Integration covers both cloud platforms and their enterprise flavors (GitHub Enterprise Server, GitLab Self-Managed, Bitbucket Data Center) using standard OAuth flows and webhook signing to keep the review loop entirely inside your network. The platform is model-agnostic with Bring Your Own Key support for Claude, GPT, Gemini, Llama, and any OpenAI-compatible endpoint including locally-hosted models. Custom review rules combine your team's coding standards with requirements pulled from Jira, Linear, and Notion, automatically checking every PR against documented specifications. The CLI enables local reviews against working trees, staged diffs, branches, or specific commits, integrating into CI/CD pipelines as pre-merge gates. Source code is never stored and never used for model training, with all data encrypted in transit and at rest. 1,270+ stars and 129+ releases since March 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

New hires fail from information overload and IT bottlenecks, not lack of goodwill - the observation behind ChiefOnboarding, a free, open-source employee onboarding platform (Django, Celery, PostgreSQL, Redis). Its answer is sequences - drag-and-drop timelines that drip-feed to-do items, resources, courses, forms, and badges to each new hire, triggered by dates or by completing a previous item, so nobody faces everything at once. Onboarding starts before day one: preboarding pages welcome hires early, and colleagues can leave personal messages that appear there. The account provisioning module creates the new hire's Slack, Google, Asana, and other accounts automatically on the scheduled day via a library of integrations plus custom webhooks - the IT ticket queue never gets involved. Everything works through two equivalent interfaces: a full web dashboard and a Slack bot, either usable standalone. Slack can even auto-create new hire accounts when someone joins the workspace and assign default sequences with zero manual action. Colleague tasks with comments and collaboration, a searchable people directory, scheduled introductions, and per-hire timezone awareness (no 3 a.m. notifications) round it out. No trackers, no phoning home - third-party credentials sit in encrypted fields on your server.

Mixpost puts Facebook, Instagram, X, LinkedIn, YouTube, TikTok, Pinterest, Threads, Bluesky, Mastodon, Pixelfed, and Google Business under a single scheduling dashboard — plan content visually on a drag-and-drop calendar, queue posts for optimal engagement windows, and track audience growth per platform without juggling twelve separate apps or paying per-seat SaaS fees. Built on Laravel with a Vue.js 3 and Inertia.js frontend styled with Tailwind CSS, the Lite edition provides unified content management where each post supports platform-specific customization with individual captions, media attachments, hashtag groups, and first-comment scheduling. Posting queues automate publishing at configurable time slots throughout the day. The media library provides a centralized asset manager with drag-and-drop uploads, stock photo integration via Unsplash, and Tenor GIF search. AI-powered content assistance generates and optimizes post copy. Per-platform analytics dashboards display audience growth, engagement metrics, reach, and impressions with exportable reports. Team workspaces support role-based permissions for collaborative content management across departments. External integrations connect through the REST API, webhooks, n8n, Zapier, and RSS feeds, plus an MCP server for AI assistant publishing. Deploy via Docker Compose with MySQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One library for the books you read and the books you listen to: Chaptarr manages audiobooks and eBooks side by side, so the same title can live on your server as a chaptered M4B and an EPUB without two separate apps fighting over it. It knows the difference between editions and narrators, which means a dramatized production, an unabridged reading, and the print text can coexist as first-class versions of one work. Multi-part releases and multi-file recordings are handled as single books, and MP3 audiobooks can be converted into one chaptered M4B with chapters preserved or inserted where they are missing. Separate root folders keep audiobooks and eBooks apart, or place eBooks alongside their audio twins; either way, matching uses file tags, folder names, and release metadata to attach files to the right book automatically. Series are organized for you, metadata profiles control which languages belong in your library, and flexible renaming tokens produce filenames that read the same way a human would shelve them. Custom quality profiles per library drive automatic upgrades when a better release appears, and the standard download clients and indexer integrations from the *arr family plug straight in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With over 24,000 GitHub stars and origins in the MemGPT research paper on virtual context management, Letta has evolved into the leading open-source platform for building AI agents that maintain persistent memory, identity, and continuity across sessions rather than operating as stateless prompt-response loops. The core architecture uses memory blocks — structured, labeled text chunks that reside permanently in the agent's context window — allowing agents to programmatically rewrite their own memory, learn new skills, and improve through a sleeptime dreaming process that runs reflection and memory organization during idle periods. The self-hosted App Server deploys via Docker and exposes a WebSocket API on port 4500, letting the TypeScript Agent SDK connect from any application using local, remote, or cloud backends. Agents support git-versioned memory through MemFS where every memory change is tracked and auditable, multi-agent communication via subagents, scheduled tasks, and integration with messaging platforms including Slack, Discord, Telegram, WhatsApp, and Signal. The platform is fully model-agnostic, routing to OpenAI, Anthropic, xAI, or self-hosted open-weight models through Ollama depending on cost, performance, and data residency requirements. The Agent File format serializes complete agent state — memory, skills, prompts, and conversation history — into portable snapshots. Desktop applications for macOS, Windows, and Linux provide native interfaces alongside the terminal CLI and web chat at chat.letta.com. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Your want-to-read shelf and your audiobook library finally talk to each other, so the next book you finish can trigger the hunt for the one after it. Dewarr syncs Goodreads shelves, CSV exports, custom public lists, and Hardcover lists, then watches them for new additions worth listening to. Connect Audiobookshelf or Grimmory and it knows what you already own, importing finished downloads into verified library folders instead of leaving files stranded in a downloads directory. Follow authors and series to catch future releases, with back-catalog review, filters, and exclusions before anything is grabbed, including release-day acquisition for titles you are waiting on. When you approve auto-download, it searches MyAnonamouse, Prowlarr, and AudiobookBay, ranks sources by your format, size, and seed preferences, and hands transfers to qBittorrent. Multi-file MP3 releases come back as one chapterized M4B, a chapter per file, ready for your player. The discovery page personalizes shelves with followed lists, award collections, trending books, and new releases. Household members get individual accounts, reading lists, and permissions, with sign-in through OpenID Connect providers or Plex. Notifications for grabs, imports, and digests go out over Discord, ntfy, Apprise, or plain webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Big repositories, small questions: Open Kritt is a self-hosted platform that splits vulnerability research into focused tasks for AI agents and returns ranked, de-duplicated findings. Build a workflow as a tree of prompt steps, where each step declares the structured output it must produce and the next level launches one fresh agent per result. Scan remote or local repositories along with their dependencies, using Codex, Claude Code, or Grok Build as the harness. Every workflow ends in one fixed finding schema covering file, line, vulnerability type, trigger flow, and a malicious input example. Post-scripts then validate each finding, build a proof of concept, or write the report. Markdown severity rankers tell the model how to prioritize for your bounty program, and repeated findings collapse automatically. Model access comes from a Codex login or OpenAI, Anthropic, DeepSeek, OpenRouter, or xAI keys, with an Active switch to choose which accounts take new work. A dashboard tracks blueprints, scans, and findings, a headless command-line tool imports workflows and launches scans on servers without a browser, and finished scans export as one ZIP with a share-safe manifest. Built-in workflows, including an entry-point-driven hunt, give you a starting point. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Deploying container updates without blind surprises is what Drydock delivers through a monitor-first inspection plane that evaluates image registries, scans CVE vulnerabilities, and automates rollbacks across distributed Docker infrastructure. Systems engineers track container fleets across twenty-three public and private registries including Docker Hub, GitHub Container Registry, Harbor, and Quay using cursor-based pagination and semver classification. The integrated Update Bouncer runs Trivy and Grype static scanners against incoming candidate layers, blocking deployments that fail configurable CVE severity policies while verifying cryptographic signatures through cosign. Operators configure declarative update schedules with stabilization countdown gates that hold back brand-new releases until defined burn-in periods elapse. When updates execute, Drydock creates pre-upgrade container snapshots and evaluates post-launch container health checks, instantly restoring previous image digests and network configs if failures occur. Distributed Portwing edge agents stream live container output and system logs over encrypted WebSockets, allowing central consoles to coordinate remote daemon updates without opening inbound host firewall ports. Automated event triggers dispatch granular notifications and update payloads across seventeen communication channels including Slack, Discord, Telegram, and Home Assistant MQTT brokers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Trading alerts from TradingView, Amibroker, ChartInk, Excel, or a Python script turn into orders at your own broker through OpenAlgo, a self-hosted trading desk for Indian markets. One REST API handles orders, positions, holdings, funds, quotes, and market depth across more than 35 brokers, including Zerodha, Upstox, Angel One, Fyers, and Dhan, while a WebSocket feed streams live prices. Strategies can be wired together without code in Flow, a drag-and-drop canvas of data, indicator, condition, and order nodes with webhook triggers, or written in Python and scheduled with start and stop times in the built-in editor, each in an isolated process with live logs. The charting terminal places orders straight from the chart, with layouts of up to eight charts, over 100 indicators, drawing tools, and bar replay. Options traders get an option chain with live Greeks, OI tracker, max pain, straddle charts, a 3D volatility surface, a GEX dashboard, and a strategy builder with payoff diagrams. Analyzer mode runs any strategy against real market data with 1 crore rupees of sandbox capital. Semi-auto mode in the Action Center holds each order for your approval, and the AI agent charts, analyzes, and drafts strategies but pauses for sign-off on every order. Telegram alerts, a latency monitor, a P&L tracker, and Historify downloads with CSV and Parquet export cover daily operations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PandaDOS is a self-hosted control plane that turns Claude Code and Codex into long-running coding agents you direct through an issue queue from any browser, instead of babysitting a terminal. You file an issue with the outcome and acceptance criteria, and PandaDOS clarifies missing requirements, plans the work, picks the agent, and drives implementation, verification, and delivery in stages. Three approval levels, cautious, balanced, and automatic, decide which actions proceed alone; safe reversible steps continue automatically while destructive, irreversible, production, or secret-related decisions always come back to you. The browser workspace shows the real agent conversation, a native terminal, project files, Git history and diffs, and an execution summary, so you can inspect or intervene at any moment from a phone or laptop. Agents run on local or SSH-connected executor machines inside tmux sessions, and work sharing one repository is serialized while independent projects proceed in parallel without conflicting edits. Modules keep one assigned agent and durable project knowledge, so context from finished issues carries into the next task instead of evaporating when a chat ends. Teams can sign in through Feishu, ask the project manager questions in chat, and receive subscription notifications and approval cards on their phones. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Send a document, receive a PDF: Gotenberg is a Docker-based, stateless HTTP conversion API trusted in production by thousands of companies and adopted by notable open-source projects. Send files as multipart/form-data, get a PDF back; Chromium, LibreOffice, and fonts are the container's problem, not yours. Headless Chromium handles URLs, HTML templates, and Markdown with pixel-perfect browser rendering: it executes JavaScript, loads web fonts, waits for network idle, a JS expression, or a DOM selector before rendering SPAs, and accepts injected cookies and HTTP headers for authenticated pages. LibreOffice converts 100+ office formats - .docx, .xlsx, .pptx, and legacy formats - with page-range extraction and PDF/A archival conformance. Built-in PDF engines round out the pipeline in every image variant: merge, split, rotate, flatten, encrypt, watermark, stamp, read/write metadata and bookmarks, plus Factur-X/ZUGFeRD e-invoicing and PDF/UA accessibility compliance. Screenshots of URLs and HTML come from the same endpoints. Zero-transfer pipelines stream files directly between S3, MinIO, or GCS presigned URLs and Gotenberg, bypassing your application entirely, and webhooks enable async processing. Statelessness means horizontal scaling is trivial - run as many replicas as your conversion volume demands. Three image variants (full, Chromium-only, LibreOffice-only) trim the footprint to what you actually use.

With 15,500 GitHub stars and over 1,100 forks, Plandex delivers a terminal-based AI coding agent purpose-built for the complex, multi-file tasks that overwhelm single-file AI assistants. The Go-powered server maintains a cumulative diff review sandbox that quarantines all AI-generated changes from your project files until you explicitly approve them — enabling 20-file refactors where you cherry-pick good changes and reject bad ones without touching git. A 2M token effective context window loads only what each step requires, while tree-sitter project maps index repositories exceeding 20M tokens across 30+ programming languages, providing structural awareness of class hierarchies, function signatures, and import graphs without burning tokens on full file content. The configurable model pack system assigns different models to different roles — Claude for planning, GPT for coding, Gemini for summarization — supporting Anthropic, OpenAI, Google, OpenRouter, Azure OpenAI, AWS Bedrock, DeepSeek, Perplexity, and Ollama for local models. Full auto mode handles end-to-end autonomous workflows including high-level planning, context loading, implementation, terminal command execution, and automated debugging of both terminal and browser applications. The interactive REPL provides fuzzy auto-complete, version-controlled sandbox branching, rewind to any previous point, and Git integration for commit message generation. The Plandex Server exposes 60+ REST API endpoints for programmatic orchestration across organizations, projects, plans, and branches. Deploy via Docker Compose for self-hosted operation with your own API keys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OmniRoute is an AI gateway, aggregating 338 LLM providers including OpenAI, Anthropic Claude, Google Gemini, DeepSeek, Kimi, MiniMax, and GLM into a single OpenAI-compatible endpoint at localhost:20128. The gateway catalogs over 1,200 models across 90 free-tier providers and 40 free-forever providers, automatically rotating through tier-1, tier-2, and tier-3 fallback chains when any provider exhausts its quota or returns errors. RTK plus Caveman stacked token compression reduces eligible context by 15 to 95 percent before forwarding requests, cutting API costs dramatically without degrading output quality. OmniRoute exposes its full routing engine through a built-in MCP server with 104 tools across 31 scopes over stdio, HTTP, and SSE transports, plus an A2A protocol server with six autonomous agent skills and JSON-RPC 2.0 streaming. The gateway integrates directly with Claude Code, Cursor, GitHub Copilot, Codex CLI, OpenCode, and Cline through standard base-URL configuration. Seventeen routing strategies include latency-optimized, cost-minimized, and auto-scoring modes that evaluate candidates on success rate, context fit, model fitness, quota state, and circuit-breaker health. The Next.js dashboard provides real-time provider status, usage analytics, combo chain configuration, and model catalog browsing via a responsive PWA. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your team's group chat could have a colleague who has read every email, ticket, and document, remembers all of it, and answers in seconds; MindRoom puts AI agents like that into your chat rooms as full participants. Each agent is a real user on the open Matrix protocol, so you talk to it in MindRoom Chat on web or mobile, in any other Matrix client, or through bridges in Slack, Telegram, WhatsApp, and Discord. Give every agent its own model: a local model for private rooms, a frontier model for hard coding problems, and switch per room or thread whenever the work changes. Agents connect to more than 100 tools, including Gmail, calendars, GitHub, Google Drive, Home Assistant, and any MCP server, and they search your own documents and knowledge bases for answers with sources. Memory persists across conversations and platforms, so an agent remembers people, preferences, and project context months later and can turn repeated work into reusable skills. Before an agent sends an email or runs a command, an approval card shows exactly what will happen; you tap once to allow it, and sandboxed workers keep executed code away from your credentials. Schedule morning briefings, silent inbox checks, and recurring digests in plain language, or wake an agent from any other system with a single HTTP request. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Dify turns the notoriously complex process of building production-grade AI applications into a visual drag-and-drop experience that teams can actually ship and maintain. With over 87,000 GitHub stars and backing from prominent investors, the platform has become the go-to open-source LLMOps solution for organizations that refuse to be locked into proprietary AI stacks. The visual workflow canvas lets developers wire together LLM calls, conditional logic, iteration loops, tool invocations, and human-in-the-loop checkpoints without writing boilerplate integration code. Its RAG pipeline engine handles the full document lifecycle from ingestion of PDFs, Word documents, and HTML through configurable chunking strategies, embedding with models from OpenAI or open-source alternatives, vector storage in Weaviate, Qdrant, Pinecone, or pgvector, and hybrid semantic-plus-keyword retrieval with citation tracking. Dify integrates with hundreds of model providers including OpenAI GPT-4o, Anthropic Claude, Google Gemini, Mistral, Llama, and any OpenAI-compatible endpoint like Ollama for fully local inference. The agent framework supports both ReAct and function-calling strategies with 50-plus built-in tools spanning Google Search, DALL-E, Stable Diffusion, WolframAlpha, and custom API definitions. Published apps can be deployed as hosted web interfaces, embedded chat widgets, REST API endpoints, or MCP-compatible tools. Enterprise features include role-based access control, SSO integration, and audit logging. A built-in marketplace enables teams to share and reuse model providers, tools, and workflow templates across projects. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed with an open-source community edition.