Backed by 44,000 GitHub stars and now part of Figma, Payload is the first headless CMS that installs natively into your Next.js application's /app directory rather than running as a separate service. The code-first architecture uses TypeScript config files to define collections, globals, and field schemas — from which Payload auto-generates database tables with migrations, a fully customizable React admin panel, REST and GraphQL endpoints, and type-safe Node.js local APIs you can call directly in React Server Components. The Lexical-based rich text editor supports block-based layout building, inline media embeds, and nested field structures, while the built-in localization engine handles unlimited locales with field-level translations. Authentication ships out of the box with HTTP-only cookie sessions, CSRF protection, role-based access control definable at the document, field, and operation level, and support for OAuth providers. Version history tracks every document change with full draft and publish workflows, and Live Preview renders content edits in real-time using server components. The job queue system manages background tasks and multi-step workflows deployable via Vercel Cron or standalone workers. Database flexibility spans PostgreSQL, MongoDB, and SQLite through swappable adapters, and the plugin ecosystem includes official modules for SEO, form builders, redirects, nested documents, and search alongside hundreds of community extensions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When you want honest traffic numbers without tracking cookies or stored IP addresses, Liwan puts a real-time analytics dashboard on your own server. The dashboard ranks pages, referrers, countries, browsers, platforms, and devices, charts visitors over time, and filters out bot traffic by default. Session metrics add bounce rate, average time on site, and entry and exit pages, while UTM fields attribute visits to campaigns. Collection is adjustable globally and per site: choose how visitors are grouped, whether to store country and city, country only, or no location, and how long events are kept. Drop rules discard internal, test, and local traffic before storage, and a pruning tool applies new settings to history after a dry-run preview. Tracking is one line of HTML, or your own server can send events with custom names and properties. Location can come from a MaxMind database or from Cloudflare, Vercel, and other proxy headers. One instance holds several projects and sites, with team accounts and single sign-on through Google Workspace, Microsoft Entra ID, or an OpenID Connect provider such as Keycloak or Dex. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

SnappyMail is a fast, privacy-respecting webmail client that connects to any existing IMAP and SMTP server, booting in under a second with a JavaScript payload of just 138 KB under Brotli compression (down from RainLoop's 8 MB fork origin). No database is required: all configuration and user data persists as flat files in a single volume, making Docker deployment trivially simple with the roughly 30 MB image consuming approximately 50 MB of RAM. Built-in PGP encryption supports three backends: OpenPGP.js v5 with ECDSA and EDDSA key generation, GnuPG integration, and Mailvelope browser extension compatibility, eliminating the need for separate encryption plugins. The integrated Sieve script editor enables users to create mail filtering rules, vacation auto-responders, and forwarding conditions directly within the web interface when connected to ManageSieve-capable servers on port 4190. Multi-domain administration allows a single instance to serve users across multiple IMAP servers with per-domain authentication routing. The admin panel manages extensions, security settings, branding customization, and domain configuration. GDPR-friendly by design, it removes all social media integrations, Gravatar lookups, and external tracking present in RainLoop. Dark mode strips background and font colors from email messages. The modified Squire HTML editor replaces CKEditor for composing rich-text messages. Scores 99% on Lighthouse performance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Modoboa turns a bare mail server into a managed hosting platform, with one web console for domains, mailboxes, aliases, and quotas, plus a full webmail for the people using them. Roles separate super administrators, resellers, domain administrators, and ordinary users, with caps on how many mailboxes and aliases each administrator may create and daily sending limits per domain or mailbox. The webmail offers conversation view, folder subscriptions, scheduled sending, attachments, and search across headers and message bodies. Calendars and address books sync with standard clients, and calendars can be shared. Each user writes Sieve filters and autoreplies in the browser. Deliverability checks cover MX records and DNSBL listings, DKIM keys are generated per domain, and DMARC aggregate reports become per-domain visual reports. Amavis quarantine pages and an Rspamd frontend help with spam. Traffic graphs show message volume. Accounts authenticate against the local database, LDAP, Active Directory, or an existing SMTP server, with TOTP codes or WebAuthn security keys as a second factor. Thunderbird and Outlook configure themselves through built-in autoconfig and autodiscover endpoints. An IMAP migration tool pulls mailboxes from another provider as each person signs in. Administrators can brand the console with custom logos, extend it through plugins, and automate it through a documented REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. ISC licensed.

With over 21,000 GitHub stars and six years of steady development through version 3.1.0, Neko transforms any Docker container into a fully interactive browser or desktop environment streamed to web browsers via WebRTC with sub-300-millisecond glass-to-glass latency. The Go backend captures X server display frames using the Pion WebRTC library while the Vue.js frontend renders the remote session with native audio synchronization, delivering a significantly smoother experience than Apache Guacamole or noVNC which rely on image-over-WebSocket approaches. Multiple users simultaneously view and collaboratively control the same session with real-time input synchronization and host-managed control passing between participants. Pre-built Docker images cover Firefox, Chromium, Google Chrome, Tor Browser, Brave, Vivaldi, and Microsoft Edge alongside full desktop environments including XFCE and KDE for running any Linux application. Neko Rooms provides multi-tenant deployment with a REST API for programmatic room provisioning, while Neko Apps extends the platform with additional containerized applications beyond browsers. Sessions persist on the server independently of client connections — close your laptop, reconnect from your phone, and resume exactly where you left off. Optional VPN and Tor integration routes traffic through encrypted tunnels for privacy-sensitive browsing. RTMP broadcasting streams sessions to external platforms. The embeddable client supports iframe integration for custom portals and applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Scoring 64.4 on the WebBench benchmark — state-of-the-art among browser automation platforms — Skyvern replaces brittle XPath-based scripts with Vision LLM reasoning that adapts when websites change their layouts. The platform extends Playwright with AI-powered page methods including page.act(), page.extract(), and page.validate() that accept natural language prompts while still supporting traditional CSS selectors as fallback. The drag-and-drop Workflow Studio offers 17+ block types including navigation, extraction, login, loops, conditionals, code blocks, file download, and file upload — enabling non-technical users to build complex multi-step automations without writing code. Self-hosted deployments support bring-your-own-LLM with OpenAI, Anthropic, Gemini, and Ollama, while the multi-engine architecture allows swapping between Skyvern 2.0, OpenAI CUA, Anthropic CUA, or UI-TARS per task with a single parameter. Built-in infrastructure handles persistent browser sessions preserving cookies and localStorage across runs, automatic CAPTCHA solving for reCAPTCHA and hCaptcha, anti-bot bypass for Cloudflare and DataDome, residential proxy rotation across 20+ countries, and a credential vault integrating with Bitwarden and 1Password for secure 2FA management. Real-time session livestreaming via WebRTC enables visual debugging, while step-by-step action logs with screenshots and full LLM diagnostic traces provide production observability. The MCP server integration exposes Skyvern as a tool for Claude, Cursor, Windsurf, and any MCP-compatible AI agent. Connect to 6,000+ apps through Zapier, Make.com, or self-hosted N8N workflows. Deploy via Docker Compose or pip install with a two-command setup. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The integrations your SaaS product offers its own users - that is what Nango, an open-source product-integrations platform, exists to build. It solves the repetitive infrastructure work behind every third-party API connection: OAuth flows, API key handling, token refresh, encrypted credential storage, rate-limit backoff, retries, and multi-tenant connection management. It ships pre-built auth configurations for 800+ APIs. Your users connect their accounts through an embeddable, white-label Connect UI, and your backend then reads or writes data through Nango's proxy, SDKs, or REST API without ever touching raw credentials. Integration logic is written as TypeScript functions covering actions, scheduled data syncs, and webhook processing - all running on one runtime with retries, checkpointing, and per-connection logs built in. Syncs pull records incrementally on a schedule, one-way or two-way, which suits RAG pipelines, search indexing, and keeping local copies of external data current. Selected actions can also be exposed as tool schemas or through a built-in MCP server, so AI agents operate on user-connected accounts without ever handling provider credentials. Auth support spans OAuth 2.0, OAuth 1.0a, API keys, basic auth, and JWT, and observability - logs, metrics, failure detection, and a reconnect flow for expired credentials - is scoped per customer connection for easier support debugging. Works with any backend language. Self-hosting on RepoCloud keeps all customer credentials and synced data on infrastructure you control, which matters for data residency and compliance requirements.

Backed by Y Combinator and powering scraping infrastructure across 195 countries, Anakin delivers a production-grade web scraping API purpose-built for AI agents and RAG pipelines that need clean, structured data from sites that actively block conventional scrapers. The single Go binary server handles JavaScript-heavy SPAs through its Camoufox anti-detect browser service with automatic fingerprint rotation, while the HTTP-first handler chain tries lightweight extraction before escalating to full browser rendering — keeping response times under 2 seconds for static pages. The built-in React 19 dashboard provides visual scraping with live results, job tracking with status filters, domain configuration management with handler chain CRUD, and proxy performance monitoring via Thompson Sampling scoring. Structured JSON extraction leverages Gemini AI to transform raw HTML into typed schemas without manual selector maintenance. SDKs span Python, TypeScript, Go, .NET, Java, and Ruby, while the MCP server exposes all 21 tools directly to Claude, Cursor, Windsurf, and any Model Context Protocol-compatible agent. The hosted platform extends the open-source engine with AI web search returning full page content with citations, multi-source agentic research across 20+ sources per query, Wire pre-built actions covering 944 websites with 5,201 structured endpoints, persistent browser sessions for authenticated scraping, and website change monitoring with scheduled alerts. Deploy via Docker Compose with three containers or run the binary directly with optional PostgreSQL persistence. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Open a browser tab, sign in, and the whole RStudio workbench is waiting there, running against R on a Linux server instead of your laptop. The familiar four-pane layout holds a source editor, an R console, Environment and History tabs, and Files, Plots, Packages, Help, and Viewer tabs. The editor opens R scripts, R Markdown, Quarto, and Python files, with code completion, diagnostics, section outlines, and a visual mode for Quarto documents. A Terminal tab and a Python console sit beside the R console, and the Data Viewer sorts, filters, and searches data frames and nested lists. Editor breakpoints and tracebacks help debug functions, while Background Jobs run long scripts in separate R sessions so the IDE stays usable. Shiny apps and Plumber APIs run as background jobs with live reload, and a Git pane handles diffs, commits, pushes, and branches. The Connections tab browses databases, and finished reports go to Posit Connect, shinyapps.io, Quarto Pub, or RPubs. Optional Posit Assistant adds an AI chat pane that works with the model provider you choose, and administrators can switch it off. Because everything runs server-side, a class, a lab, or a team can share one large-memory machine and keep computation next to the data without installing anything locally. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Design a website on a canvas, manage its content in spreadsheet-style tables, and publish plain HTML, all from one self-hosted Instatic server. Designers see several breakpoint frames side by side, or switch to live mode and edit one full-size page in place. A built-in design system expands one brand color into a full shade scale, generates fluid type and spacing scales, and writes the utility classes into a single small stylesheet. Reusable Visual Components take typed parameters and named slots, templates set site-wide or per-post-type layouts, and loops repeat a design over posts or media. Editors work in custom post types and data tables, and posts move through draft, scheduled, and published states. Forms on the site save their submissions to tables of your own. An AI agent can do the building, placing real, editable nodes on the canvas using Claude, OpenAI, OpenRouter, or Ollama with your own key, and an MCP connector lets Claude, ChatGPT, and other remote agents work on the site too. Super Import converts a whole static site into pages, styles, tokens, and media. Teams get roles built from 38 capabilities, TOTP two-factor sign-in, and an append-only audit log, plus site branches with private copies, shareable preview links, and merge review. Everything published is baked to plain HTML and CSS on disk. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

TextBee turns an Android phone with a SIM card into an SMS gateway your applications can call, so one-time codes, alerts, reminders, and two-way conversations go out as ordinary texts from a real number. Pair a phone by scanning a QR code in the dashboard, then send messages from the REST API, the dashboard, or the JavaScript SDK. Bulk campaigns load from a CSV file and are paced to stay within carrier limits, and any message can be scheduled up to 72 hours ahead. With several phones or SIM cards attached, each message can name the device and SIM it should use. Every message moves through pending, dispatched, sent, delivered, or failed, and the history view lists all devices together. Incoming texts appear in the dashboard and the API, and webhooks push received messages and delivery reports to your server with an HMAC-SHA256 signature you can verify. An official MCP server lets AI assistants send texts and read replies. API keys, devices, usage, and webhook subscriptions are all managed from one web interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Running your own mail server usually means assembling five services and praying over DNS records; LanQin Email ships the whole stack in one container. Readers switch between mailboxes, search, label, star, and file messages into folders, then compose with a rich-text editor that handles fonts, colors, code blocks, attachments, emoji, and scheduled sending. Contacts, signatures, inbox rules with automatic forwarding, sender blacklists, and mail statistics make it a daily client rather than a demo. Administrators run the postal side from the same panel: add domains and generate DKIM keys, follow the DNS record checklist the system verifies for you, create mailboxes, set delivery aliases and catch-all addresses, and audit every message on the server. Accounts sign in with passwords or OAuth single sign-on, protected by TOTP two-factor codes and bot checks, while permission groups cap attachment size, sending rate, and mailbox count per user. Users can even request their own mailbox and wait for approval instead of filing a ticket. For programs, an Open API with bearer tokens sends mail idempotently and reports delivered, bounced, complained, rejected, and deferred events back through webhooks. External Gmail and Outlook accounts can be aggregated over IMAP, and a client-configuration page shows every IMAP, POP3, and SMTP setting in one place. A multi-container layout remains for debugging the stack piece by piece. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

If you can write a SELECT statement, you can publish a working web app with SQLPage, where each query's results appear on the page as tables, charts, maps, or forms. A .sql file is a page. Name a component in the first row, and the rows after it become lists, cards, data grids, timelines, or step trackers. Tables offer searching, sorting, frozen headers, and per-row edit and delete buttons. Charts cover line, area, bar, pie, scatter, bubble, and heatmap views with a one-click CSV export. Forms feed INSERT and UPDATE statements directly, with validation and file uploads. A complete CRUD tool takes a handful of queries. The map component plots markers and GeoJSON shapes, and the JSON component lets the same data serve other systems as an API. Protect private pages with password logins or single sign-on through Google, Microsoft, or your own identity provider. Connect to SQLite, PostgreSQL, MySQL, SQL Server, or ODBC sources such as DuckDB, Oracle, Snowflake, and BigQuery. Tabs, modals, alerts, breadcrumbs, and carousels shape multi-page sites, and custom templates, CSS, and JavaScript fill any gap. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Convoy is an enterprise-grade webhooks gateway that manages both incoming and outgoing webhook traffic to guarantee reliable event delivery without exposing internal microservices to the public internet. Organizations deploy the platform at the edge to ingest events from message brokers such as Apache Kafka, RabbitMQ, and Google Cloud PubSub, or receive HTTP webhooks from third-party services directly. The gateway enforces delivery policies through configurable rate limiting per endpoint, circuit breaking during downstream outages, and automated retries using constant or exponential backoff with jitter. Developers can generate customer-facing webhook portals embedded via iframes, allowing end users to inspect delivery attempts, verify HMAC-SHA256 signatures, and manually replay failed events. Comprehensive security controls include static egress IP proxying to prevent server-side request forgery, automated rolling secret keys, and instant alerting via Slack or email when endpoints fail consecutively. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License 2.0 licensed.

Content types, media libraries, workflows, roles, search, and a GraphQL API all ship in the box with Orchard Core, a free CMS and application framework that hosts many separate websites from one install. Editors build content types in the admin by combining parts and fields, with no migrations to write, and preview an item live before publishing it. Designers adjust page HTML safely with Liquid templates, and developers add their own modules. Multi-tenancy runs many isolated sites from one deployment, each with its own content, users, settings, and theme, and a setup screen lets you pick a recipe and database for each site. Media uploads can be resized on the fly and stored on remote providers, and a visual workflow editor automates content approvals, webhooks, and form submissions. A typed GraphQL API feeds headless sites and single-page applications, and custom SQL or Lucene queries can be exposed as endpoints. Roles and fine-grained permissions decide who can do what, OpenID Connect handles external sign-in, and two-factor authentication protects accounts. Content and the admin interface can be localized, and deployment plans move content and configuration from staging to production. SQLite works out of the box, SQL Server, MySQL, MariaDB, or PostgreSQL can be chosen at setup, and the official Docker image starts a site with one command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

With over 20,000 GitHub stars and adoption by companies building everything from telehealth platforms to AI voice agents, LiveKit is the most widely deployed open-source real-time communication server available. The Go-based Selective Forwarding Unit handles hundreds of concurrent participants per node with adaptive bitrate streaming, simulcast layers, SVC codec support for VP9 and AV1, and end-to-end encryption. Client SDKs span JavaScript, Swift, Kotlin, Flutter, React Native, Rust, Python, Unity, and ESP32 embedded devices, while server-side APIs cover Node.js, Go, Ruby, Java, Python, Rust, PHP, and .NET. The Agents framework enables building AI-powered voice and video applications — real-time speech-to-text, LLM-driven conversations, and computer vision pipelines — running as server-side participants in any room. Egress records sessions to S3-compatible storage or streams to RTMP endpoints, while Ingress pulls external feeds from OBS via RTMP, WHIP, or SRT into LiveKit rooms. The SIP bridge connects traditional telephony to WebRTC rooms for hybrid conferencing. JWT-based authentication, webhook notifications, room-level moderation APIs, and selective subscription give operators granular control. Deploy as a single binary for development, Docker Compose for production single-node, or Kubernetes with the official Helm chart for distributed multi-region clusters using Redis for state coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Five mailboxes, five tabs, five passwords: Gofer folds Gmail, Outlook, iCloud, and plain IMAP accounts into one browser tab where every inbox reads as a single, searchable whole. Threads, labels, and drag and drop keep triage fast, and search still finds the receipt from three years ago. Signatures and custom senders shape outgoing mail, scheduled sends wait for Monday morning, and a thread in another language translates in place. The calendar keeps pace with your mail: Google, Outlook, and CalDAV events sync both ways, invitations land in the inbox, and an RSVP or a Meet or Teams link attaches without leaving the message. Contacts follow the same rule through Google, Outlook, and CardDAV sync, so the address book you fix once is right everywhere. One install can serve a household or a small office, with separate users, encrypted credentials, blocked remote images, and passkey or authenticator sign-in for anyone who wants it. Classic, Minimal, and retro Express themes, flexible layouts, and push notifications make the daily inbox feel personal rather than administered. Leaving stays easy too: mailboxes export as mbox, mail moves between accounts, and a whole setup imports into another Gofer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Kurrier unifies email, calendars, contacts, and file storage in a single web interface that connects to any email provider you already use. The Next.js frontend with Nitro API worker deploys via Docker Compose on PostgreSQL and Redis, delivering a cohesive workspace where IMAP/SMTP mailboxes from Gmail, Outlook, or corporate servers sit alongside transactional providers like AWS SES, SendGrid, Mailgun, and Postmark. Automatic inbox building handles threads, attachments, sent items, and deletion sync through persistent background polling. The CalDAV backend enables full two-way calendar synchronization with iOS, macOS, Android via DAVx5, and Thunderbird, supporting event invitations, RSVP processing through the inbox, timezone-aware scheduling, and contact-aware attendee linking. CardDAV contacts sync bidirectionally across all devices with unified name, avatar, and email resolution. Kurrier Drive provides integrated file storage through WebDAV locally or S3-compatible backends for cloud storage. Multiple identities and domains let you manage several email accounts from different providers in one interface, with fast local search indexing subjects, senders, and content without dependency on external APIs. The API-first architecture exposes clean endpoints for automation and custom integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.