Every AI agent session starts from zero, and Busabase fixes that: it is an open-source workspace where agents and people share records, docs, skills, and apps, and every agent write arrives as a reviewable change. Bases hold typed records with relations, views, and forms, while Docs, Files, Whiteboards, and Workflows live in the same tree, so a project's data and context stay together. Skills are SKILL.md playbooks that any connected agent can look up before it acts. Each write becomes a Change Request carrying a message, a field-level diff, an author, and history; your permissions decide whether it merges at once or waits in the Inbox for approval, and any change can be reversed. Ask an agent to turn a Base into a dashboard, CRM, or content desk and it runs as an AirApp on live workspace data. Claude Code, Codex, Cursor, Gemini CLI, n8n, or your own process can connect through MCP, OpenAPI, the CLI, TypeScript and Python SDKs, or an in-app chat session. Templates install a complete setup, with sample data and an agent manual, in one command. Start it with one command and no accounts, because the open-source edition is a single-user workspace with no sign-in screen. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 24,000 GitHub stars and origins in the MemGPT research paper on virtual context management, Letta has evolved into the leading open-source platform for building AI agents that maintain persistent memory, identity, and continuity across sessions rather than operating as stateless prompt-response loops. The core architecture uses memory blocks — structured, labeled text chunks that reside permanently in the agent's context window — allowing agents to programmatically rewrite their own memory, learn new skills, and improve through a sleeptime dreaming process that runs reflection and memory organization during idle periods. The self-hosted App Server deploys via Docker and exposes a WebSocket API on port 4500, letting the TypeScript Agent SDK connect from any application using local, remote, or cloud backends. Agents support git-versioned memory through MemFS where every memory change is tracked and auditable, multi-agent communication via subagents, scheduled tasks, and integration with messaging platforms including Slack, Discord, Telegram, WhatsApp, and Signal. The platform is fully model-agnostic, routing to OpenAI, Anthropic, xAI, or self-hosted open-weight models through Ollama depending on cost, performance, and data residency requirements. The Agent File format serializes complete agent state — memory, skills, prompts, and conversation history — into portable snapshots. Desktop applications for macOS, Windows, and Linux provide native interfaces alongside the terminal CLI and web chat at chat.letta.com. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Engineers who have outgrown Duplicati or rsync scripts tend to appreciate Kopia's design: encrypted, compressed, content-deduplicated snapshots in Go, stored in a repository on any storage you control - S3, Google Cloud Storage, Azure Blob, Backblaze B2, SFTP, WebDAV, or a plain filesystem. Encryption is mandatory and end-to-end: every block is encrypted client-side with AES-256-GCM or ChaCha20-Poly1305 using keys derived from your repository password, and even file names never leave the machine in plaintext. Blocks are packed into 20-40 MB blobs with random names, so the storage provider learns nothing about content or structure. Deduplication is automatic and content-based - identical data across files, snapshots, and even multiple machines backing up to the same repository is stored once. Policies govern everything per-directory: compression choice, retention (hourly through annual), scheduling, and ignore rules. Incremental snapshots are point-in-time records you can mount and browse like a filesystem. This deployment runs the Kopia repository server with its web UI, centralizing backups from multiple client machines over an authenticated API - each client connects with the server URL and certificate fingerprint, and users only see their own snapshots. Error correction, high-latency-tolerant caching, and both CLI and GUI round it out.

Evolution API gives your applications a production-ready REST interface to WhatsApp, supporting both free Baileys-based Web connections and Meta's official Business Cloud API from the same server. With 9,200+ stars and 7,100+ forks, it is the most widely deployed WhatsApp integration layer available. Each installation handles unlimited isolated instances (one per phone number) with independent auth, webhooks, and database separation via Prisma ORM against PostgreSQL or MySQL, cached through Redis. Message types include text, images, audio, video, documents, contacts, locations, interactive buttons, list messages, carousel cards, and PIX payment links through unified endpoints. Native integrations connect to Typebot for chatbot flows, Chatwoot for multi-agent support, Dify and OpenAI for AI conversations, N8N and Flowise for workflow automation, and RabbitMQ, Kafka, or SQS for enterprise event streaming. Socket.io delivers real-time message and connection events. Amazon S3 or MinIO handles media offloading. The Evolution Manager v2 dashboard provides visual instance creation, QR code scanning, connection monitoring, and integration configuration without touching the API directly. Docker Compose bundles the server, PostgreSQL, and Redis with environment-variable-driven setup. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Somewhere between the shoebox and the inbox, Papra keeps receipts, warranties, and leases in a self-hosted archive you can actually search. Upload a photographed receipt and built-in OCR reads its text, so a search for the store name finds it later. Searches combine name:, content:, tag:, created:, and has: filters with AND, OR, NOT, and parentheses, and any query can be saved as a sidebar view. Tagging rules label uploads by name or content and can be applied to documents already stored. Optional AI auto-tagging works with a cloud provider or a local model such as Ollama. Custom properties add searchable typed fields such as text, number, date, yes or no, and select. Organizations keep a household's or a team's archive apart, with owner, admin, and member roles. Share links let outsiders open a document without an account, with optional passwords and expiry dates, and each link can be switched off. Forward an email to a generated address, or drop files into a watched folder, and documents arrive without opening the app; both are opt-in. Deleted files wait 30 days in the trash, and optional encryption protects stored files. Sign in with email, GitHub, Google, or a custom OAuth2 provider, and script the archive through the API, SDK, CLI, or webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Doca puts rich text, Markdown, spreadsheets, slides, and an infinite canvas under one login and one permission model, giving individuals and small teams a self-hosted workspace for writing together. Every format supports real-time co-editing with presence, comments, saved history, and manual snapshots, and rich text and Markdown documents can be restored to an earlier version. Documents live in knowledge libraries with tree navigation, invitations, inherited permissions, share links, and trash, while personal files and shared folders sit on local disk or S3-compatible storage. Knowledge books go further: they subscribe to sources, run an editable workflow, keep source evidence, and route results through human review. A personal AI assistant, powered by whichever model you configure, searches authorized documents, reads PDF and Office attachments, edits images, and prepares browser drafts. MCP services let external AI clients such as Codex use those tools under your permissions. Sign in with a password, OIDC, Google, GitHub, WeChat, or QQ, review registrations before they go live, and send webhooks to other systems. A plugin SDK and marketplace add business modules, and a browser extension clips pages into documents. The interface ships in Chinese and English. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Machine translation with no Google, no Azure, no per-character billing, and no text leaving your infrastructure: LibreTranslate is a free, open-source translation API that runs entirely on your own server. The engine underneath is Argos Translate, which runs OpenNMT neural models with SentencePiece tokenization and Stanza sentence-boundary detection, all offline. Models install as portable .argosmodel packages covering dozens of languages - English, Spanish, French, German, Chinese, Japanese, Russian, Arabic, Hindi, Portuguese, and many more - and Argos handles automatic pivoting: with es-to-en and en-to-fr installed, it chains them to translate es-to-fr without a direct model. The API is a straightforward HTTP POST to /translate with source and target language codes, returning JSON - simple enough that the ecosystem has clients in every major language and integrations across tools like Weblate and Mastodon. Beyond plain text it translates HTML while preserving markup and handles whole file uploads (documents in, translated documents out), plus automatic language detection when the source is unknown. A clean bundled web UI serves interactive translation for end users, and optional API keys with rate limits control access. AGPL-licensed and trainable with custom models, it is the standard answer when translation must be private, unmetered, and self-contained - GDPR-sensitive text never touches a third party.

Securing a SaaS product, running B2B onboarding, or replacing Auth0 and Keycloak with a stack they own - teams needing more than basic auth reach for ZITADEL, an open-source identity and access management platform built in Go. Its multi-tenancy model is the differentiator: a strict Instance, Organization, Project hierarchy isolates data and scopes policy at each level, with identity brokering (pre-built templates for Google, GitHub, Microsoft, Apple, plus generic OIDC, OAuth, SAML, and LDAP), domain discovery that routes users to the right organization by email domain, and delegated management so customers administer their own users and roles. Authentication covers OpenID Connect (certified, including device authorization and token exchange), SAML 2.0 as both IdP and SP, SCIM, FIDO2 passkeys for phishing-resistant passwordless login, and MFA via OTP, email, SMS, and U2F; machine-to-machine flows support JWT profile, PATs, and client credentials. The architecture is event-sourced - every mutation is an immutable event, yielding a complete audit trail - with relational projections for queries and no external session store, so it scales horizontally. API-first with gRPC and REST, extensible via Actions webhooks, and the same codebase self-hosted (Docker Compose or Helm on PostgreSQL) as in the cloud.

With 13,800+ GitHub stars and active releases through 2026, Casdoor is the open-source identity platform that ships OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn passkeys, TOTP multi-factor authentication, and Face ID biometric login in a single Go binary with a React web console — covering every authentication protocol your organization will ever need. Social login connects 50+ identity providers including Google, GitHub, Microsoft Azure AD, Facebook, WeChat, DingTalk, Apple, Twitter, and LinkedIn without custom code. The AI-first architecture includes a Model Context Protocol gateway for AI agent authentication and Agent-to-Agent protocol support for securing LLM-powered workflows. Built-in Casbin integration delivers authorization primitives beyond basic RBAC: attribute-based access control, relationship-based access control, and custom policy models through a unified engine. The organization-scoped multi-tenancy model isolates users, applications, and identity providers per tenant with customizable login pages, branding, and SMTP configuration. SCIM 2.0 endpoints automate user provisioning from HR systems and Active Directory. Official SDKs for Go, Java, Node.js, Python, and PHP accelerate application integration. The RESTful API exposes every resource for programmatic management. Comprehensive audit logs record authentication events and administrative actions. Deploy via Docker Compose with MySQL or PostgreSQL, the all-in-one SQLite Docker image for quick trials, or the official Kubernetes Helm chart for production clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Solidtime is a time tracker for freelancers and agencies, offering a modern SaaS-quality interface that rivals commercial tools like Toggl and Clockify. The time tracking interface provides a running timer, calendar view, and weekly timesheet for flexible entry across desktop, mobile, and the dedicated macOS, Windows, and Linux desktop applications. Project management organizes work by client with hierarchical billable rates configurable at organization, member, project, and project-member levels, ensuring accurate billing across complex team structures. The invoicing module generates polished PDF invoices and structured EU e-invoices with configurable VAT rates, percentage and fixed discounts, EU reverse-charge handling, reusable company templates, and automatic line item generation from billable time entries. Reporting provides filterable summaries by user, project, client, and date range with exportable data for billing audits and team retrospectives. Multi-organization support manages separate workspaces from a single account with role-based permissions controlling access across organizations. Data import from Toggl, Clockify, and generic Timeentry CSV files enables migration from existing tools without losing historical records. The RESTful API with bearer token authentication enables automation and integration with external services. Docker deployment with PostgreSQL runs behind Nginx or Traefik reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 24,000 GitHub stars and active development since 2014, Firefly III is the self-hosted personal finance manager that gives you complete control over your financial data without ever contacting external servers. The double-entry bookkeeping system tracks every transaction with source and destination accounts, ensuring accurate balance calculations and audit trails across checking, savings, credit card, cash, and asset accounts. Budget management sets monthly spending limits by category with visual progress tracking and rollover support for unused allocations. Rule-based transaction automation applies categorization, tags, and budget assignments automatically based on configurable conditions matching description, amount, source, and destination patterns. Recurring transactions schedule regular bills, subscriptions, and income entries with automatic creation on configured dates. Piggy banks divide savings accounts into virtual sub-accounts for goal tracking with target amounts and deadlines. Financial reports include income versus expense summaries, budget performance charts, category breakdowns, tag reports, and net worth tracking with weekly, monthly, and yearly time ranges. Multi-currency support handles any currency with configurable exchange rates for international finance tracking. The REST JSON API covers nearly every feature for integration with external tools, import utilities, and the companion Firefly III Data Importer for bank statement processing. Two-factor authentication provides account security. Self-hosting deploys via Docker containers or directly on PHP 8.5+ with MySQL or PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Links rot - the hard truth Linkwarden is built around, as a collaborative bookmark manager that preserves what it saves. Every page you save is fully preserved - a screenshot, a PDF, a self-contained single-file HTML archive (generated by the Monolith Rust binary), and a clean reader view - so the content survives even after the original site disappears. Think of it as a private Wayback Machine you own, with an optional one-click snapshot to archive.org on top. The reading experience matches the archival rigor: a distraction- free reader view supports text highlighting and annotation, and full-text search across everything you have saved is powered by Meilisearch. Optional AI tagging analyzes page content and auto-assigns tags - generate new ones, pick from your existing set, or constrain to predefined tags - with providers ranging from local Ollama models (fully private) to OpenAI, Anthropic, and OpenRouter. Organization is collections, sub-collections, and multiple tags per link; teams collaborate on shared collections with per-member permissions, and public collections share curated link sets (with preserved copies) to anyone. The stack is Next.js/React on TypeScript with PostgreSQL via Prisma, NextAuth supporting credentials, OAuth2, and SAML SSO, and a Playwright-driven headless Chromium worker doing the capture. Native iOS and Android apps and browser extensions feed it from anywhere.

Big repositories, small questions: Open Kritt is a self-hosted platform that splits vulnerability research into focused tasks for AI agents and returns ranked, de-duplicated findings. Build a workflow as a tree of prompt steps, where each step declares the structured output it must produce and the next level launches one fresh agent per result. Scan remote or local repositories along with their dependencies, using Codex, Claude Code, or Grok Build as the harness. Every workflow ends in one fixed finding schema covering file, line, vulnerability type, trigger flow, and a malicious input example. Post-scripts then validate each finding, build a proof of concept, or write the report. Markdown severity rankers tell the model how to prioritize for your bounty program, and repeated findings collapse automatically. Model access comes from a Codex login or OpenAI, Anthropic, DeepSeek, OpenRouter, or xAI keys, with an Active switch to choose which accounts take new work. A dashboard tracks blueprints, scans, and findings, a headless command-line tool imports workflows and launches scans on servers without a browser, and finished scans export as one ZIP with a share-safe manifest. Built-in workflows, including an entry-point-driven hunt, give you a starting point. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OpenMetadata builds a unified knowledge graph connecting schemas, tables, columns, dashboards, pipelines, ML models, and data products into one searchable catalog accessible at port 8585. The ingestion framework ships 130+ connectors covering Snowflake, BigQuery, Redshift, Databricks, PostgreSQL, MySQL, Kafka, Airflow, dbt, Tableau, Looker, Power BI, Metabase, and Superset, automatically extracting metadata on configurable schedules. Column-level lineage traces data flow across transformations, joins, and aggregations, while built-in data quality testing executes profiling and validation rules as data contracts with automated alerting on failures. Governance features include role-based access control, PII auto-detection, glossary term propagation, and domain-based ownership assignment. The native MCP server and AI SDK expose semantic search, lineage queries, and governance metadata as tools any LLM agent can call, enabling AI systems to discover and reason about enterprise data with full trust context. The architecture requires only PostgreSQL or MySQL plus Elasticsearch, no Kafka, no graph database, and deploys via a single Docker Compose file. Created by the founders of Apache Hadoop, Apache Atlas, and Uber's Databook, the platform has earned over 14,700 GitHub stars and adoption by 3,000+ organizations. Apache 2.0 licensed.

Agent Zero equips large language models with a persistent virtual Linux desktop, letting autonomous AI agents write code, research the web, and execute multistep tasks without supervision. Operating within an isolated container, the system opens an interactive XFCE graphical desktop in your browser canvas where the agent interacts with GUI applications like Blender and terminal sessions directly. Its embedded browser features interactive annotation tools, letting you click web elements to inspect stylesheet hierarchies, extract component markup, or submit automated testing instructions. You can cowork on spreadsheets, presentations, and Markdown specifications in real time alongside the agent, preserving document revisions through snapshot time travel. A multi-tier memory architecture backed by FAISS vector indexing and SearXNG web discovery retains problem-solving context across projects, while hierarchical delegation spins up specialized subordinate agents to parallelize complex engineering audits. The platform connects seamlessly to commercial LLMs via OpenAI, Anthropic, or OpenRouter, runs private local models through Ollama, and integrates custom toolkits via the Model Context Protocol and community Plugin Hub. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

FastGPT lets you build production AI agents and knowledge base chatbots through a visual drag-and-drop workflow editor, connecting any LLM provider to your documents with retrieval-augmented generation that cites sources and reduces hallucination. The workflow canvas chains LLM calls, conditional branching, HTTP requests, code sandbox execution, and plugin nodes into complex conversation flows and agent skill pipelines without writing backend code. The knowledge base engine ingests documents in ten formats (TXT, Markdown, HTML, PDF, DOCX, PPTX, CSV, XLSX, URL scraping, and CSV batch import) then applies automatic chunking, hybrid vector retrieval with semantic reranking, and QA-pair splitting to deliver accurate, citation-backed answers. FastGPT connects to virtually any LLM provider through its AI Proxy aggregation layer: OpenAI GPT-4o, Anthropic Claude, Google Gemini, DeepSeek, Qwen, ERNIE Bot, and models hosted via Ollama all work through a unified OpenAI-compatible API. Bidirectional MCP support enables agents to call external tools and expose their own capabilities to other systems. Completed applications can be shared via login-free links, embedded as iframe widgets, or integrated with WeCom, Lark, DingTalk, and WeChat Official Accounts through the published REST API. Application operation logs, conversation annotation, and per-model usage analytics provide full lifecycle governance for compliance-sensitive deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. FastGPT Open Source License (Apache 2.0 based) licensed.

Behind a single dashboard, MyIP brings together multi-source IPv4 and IPv6 geolocation lookups, WebRTC and DNS leak detection, global latency probes, and Autonomous System routing analysis so you can audit network privacy and connectivity without bouncing between a dozen ad-ridden diagnostic sites. Side-by-side IP cards compare your detected address across multiple independent providers, displaying country, city, local time zone, ASN details, RPKI prefix announcements, and upstream transit paths to Tier 1 backbones. Privacy tests immediately expose real IP addresses leaked over WebRTC SDP handshakes or misconfigured VPN DNS resolvers, while a browser fingerprint analyzer and a 258-item cybersecurity checklist help harden client configurations. Network engineers can test reachability and multi-round minimum latency across up to 60 websites using curated category packs, verify split-tunnel proxy rules, and run worldwide ping, MTR traceroute, and censorship checks powered by distributed Globalping nodes. Additional lookup tools include a multi-country DNS resolver for spotting DNS poisoning, Whois and MAC vendor queries, a local IPv4 and IPv6 subnet calculator, live status feeds for major cloud services, and shareable diagnostic reports exported as expiring links, Markdown, or JSON. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Securo is a privacy-first personal finance platform that keeps all your financial data in your own PostgreSQL instance while connecting to 2,500+ banks across three continents for automated transaction sync. The FastAPI backend with React/TypeScript frontend deploys via Docker Compose on ports 3000 and 8000, with Redis-backed Celery workers handling background synchronization. Bank connections span approximately 2,500 European PSD2 institutions through Enable Banking across 29 countries, US and international banks via SimpleFIN's open protocol, and Brazilian banks through Pluggy, all refreshing automatically every four hours. Multi-account management tracks checking, savings, credit cards, and investments with running balances. The auto-categorization rules engine applies pattern-matching across merchants and amounts. Goal tracking monitors savings targets with progress visualization, asset management handles stocks and custom instruments with configurable valuation growth rules, and reports generate Net Worth and Income vs Expenses charts with category sparklines. Optional AI Agents provide LLM chat with tool-use over your financial data through MCP, supporting OpenAI, Anthropic, Ollama, and compatible providers with per-agent RAG knowledge bases accessible via a global command palette. Multi-user support includes OIDC login, passkey authentication, TOTP two-factor, privacy mode, and multi-currency FX conversion via Open Exchange Rates. 1,500+ stars since March 2026. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.