Links
Add"putzen" is German and means cleaning. It helps keeping your disk clean of build and dependency artifacts safely.
Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.
The virtualization API.
The libvirt project is a toolkit to manage virtualization platforms. supports KVM, Hypervisor.framework, QEMU, Xen, Virtuozzo, VMware ESX, LXC, BHyve and more.
Related contents:
Self-hosted WireGuard® access management — bring every remote worker, device and site securely back to HQ. One native binary (Quarkus + GraalVM).
Peers, users, group-based ACLs and a self-service portal — one native binary, no SaaS.
Network Observability for the AI Era.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Open Source Secret Scanner with Live Validation
Detect, validate, and revoke leaked credentials across your codebase, Git history, cloud storage, and developer platforms. Built in Rust by MongoDB.
S3-compatible object storage, without the weight.
VaultS3 is a self-hosted, S3-compatible object store in a single binary under 80 MB of RAM, with a built-in dashboard, erasure coding, clustering, encryption, and vector search. The maintained, honest alternative to MinIO.
Git worktree manager for the terminal: CLI + TUI in Rust. Creates the worktree, runs your project setup, links the GitHub issue. Single binary, no git CLI needed.
top-style TUI for monitoring AI coding agent sessions.
Your window into what your AI coding agents are doing, sitting in the terminal, where you run them. agtop is a top-style terminal dashboard that tracks every Claude Code and Codex session on your machine: spend, token usage, context pressure, CPU load, tool invocations, and more. All in one place, live.
Open Source, Self-Hostable Deployment Platform.
Push your code - builds, config, and deployment are handled automatically. Use our cloud or connect your own servers. Zero lock‑in, completely open‑source.
Open-source, self-hostable deployment platform with built-in CI/CD. Push code, ship containers, manage infrastructure — from a desktop app, web dashboard, or CLI.
Seemingly normal USB drive with a hidden security feature.
Phantomdrive is open source encrypted USB drive with a stealth mechanism to hide its second partition. To decrypt it you must create a file containing your password in the format password:addpasswordhere, this is used to derive AES-XTS keys. The drive automatically unmounts itself, remounts the remaining disk and encrypts and decrypts in place. It uses CH569W SoC, which has USB3, SDIO and an AES hardware block. It is programmable over USB using the wch-ch56x-isp library.
Related contents:
Real-time router/firewall traffic visualizer TUI for Linux (interfaces, conntrack, firewall drops).
Where a host monitor shows your machine's own traffic, fwtop is built for the box that sits between networks — an edge router or firewall. It reads kernel state directly (near-zero overhead, no packet capture) to show per-interface throughput (split into WAN/LAN zones), the live connection-tracking table (including NAT), and firewall rule counters with a smoke→fire drops heatmap that surfaces spikes at a glance.
Related contents:
A Self-Hosted AI Workspace.
A self-hosted AI workspace for chat, agents, research, documents, email, notes, calendar, and local model workflows.
Related contents:
A top for eBPF programs.real-time view of running eBPF programs.
Real-time average runtime per call, events/s, and CPU utilization for every loaded eBPF program.
GameStream client for PCs (Windows, Mac, Linux, and Steam Link).
Artemis Qt is an enhanced cross-platform client for NVIDIA GameStream and Apollo/Sunshine servers. It brings the advanced features from Artemis Android to desktop platforms.
Related contents:
Dusseldorf is an out-of-band security tool to help in security research.
Dusseldorf is a private, customizable out-of-band application security testing (OAST) platform. It captures inbound network traffic across multiple protocols and lets you craft automated responses for security validation workflows.
It is designed for security professionals who need controlled infrastructure to detect and validate out-of-band vulnerabilities such as SSRF, XSS, SSTI, XXE, and related classes of defects.
Keep your Docker containers fresh, safely. A safe Docker container auto-updater.
freshdock watches your running containers, notices when a newer image ships, and updates them health-gated. A broken update rolls back automatically instead of leaving you with a dead service. The maintained successor to the archived Watchtower.
Schedule, supervise, observe. One binary.
Cron job manager + process supervisor in a single binary. Web dashboard, TUI, retries, failure notifications. crond/supervisord replacement
Run AI locally on your Mac.
Local AI, native to your Mac. Chat, serve, monitor, and connect MLX models from one macOS app.
Headless streaming server for Moonlight clients, written in Rust.
Moonshine lets you stream games from your PC to any device running Moonlight. Your keyboard, mouse, and controller inputs are sent back to the host so you can play games remotely as if you were sitting in front of it.
Related contents:
Global DNS propagation checker TUI — watch a DNS record propagate across 34 public resolvers worldwide, on a world map in your terminal
Stop console.log()-ing every request. reqlog gives you a live dashboard of every HTTP request hitting your server — zero config.
A Cloudflare-based email service.
A simple, responsive email service designed to run on Cloudflare Workers 🎉. With only one domain, you can create multiple different email addresses, similar to major email platforms. This project can be deployed on Cloudflare Workers to reduce server costs and build your own email service.
Interactive interface for browsing global, full-resolution satellite imagery.
Universal, model-agnostic operating harness for AI agents (Claude, Codex, Gemini, …) — a lean core + work-type profiles assembled by one setup script.
AI Builder Real World Apps. Open-source app builder engine — intent to working app.
The open-source Convergence App Builder. Generate a working app from intent, then verify every agent turn against its business requirements.
AI SRE AgenticOps for Kubernetes and cloud infrastructure. Your infrastructure can explain itself, heal safely, and prove it recovered.
Flawless is an AI-native SRE control plane for Kubernetes and cloud infrastructure. It connects alerts, evidence, topology, human approval, controlled remediation, and recovery verification in one auditable AgenticOps loop.
Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.
ADPathFinder is an attack mapping tool for pentesters and red teamers. It analyses SharpHound data and unifies it with OpenGraph plugins to surface attack paths to high-value targets such as Domain Admins and Domain Controllers, starting from low-privileged users and computers. MSSQLHound and ConfigManBearPig are supported natively, extending coverage across AD, ADCS, SCCM, and MSSQL.
Related contents:
The lazygit for PostgreSQL. A vim-style terminal UI for browsing, querying, and editing your database without leaving the keyboard.
A vim-style TUI PostgreSQL client built like lazygit — fast keyboard navigation, modal panes, and a focused workflow for browsing and querying your database from the terminal.
Your agents already solved this. deja finds it.
Memory tools start empty and record forward. deja starts full: it indexes the sessions your agents already wrote to disk — months of history from before you installed it — hands it back over MCP so any agent recalls what any other solved, and follows you between machines over SSH.
🎨 Create beautiful code screenshots with customizable styles .
Goshot is a Go library and CLI for creating beautiful screenshots of code and terminal output, with syntax highlighting, window chrome, and rich backgrounds. Similar to Carbon and Silicon.
An open source Snowflake cost optimization and observability dashboard.
See and Manage Open Ports on Mac.
When you're working on multiple projects at the same time, it's easy to lose track of what's running. A database here, a dev server there, an API you forgot was still open... before long, your ports become a mess.
Portero gives you a clear view of everything running on your machine, so you always know what's using each port, can stop what you don't need, and get back to building instead of debugging port conflicts.
Point it at any web page and it finds the video, extracts the stream, transcodes it and casts in real time to your TV. It even burns subtitles….
Related contents:
cost control for AI agent loops. Your AI agent loops don't know when to stop. LoopGain does.
When an agent keeps checking and revising its own work, it often spins on a problem it can't solve — or talks itself into an answer worse than one it already had. LoopGain watches the loop as it runs, stops it at the right iteration, and keeps the best version, not the last.
ReactBench is an evaluation for coding agents on realistic React work. Models can pass every test in today’s benchmarks and still write React that fails in production. Tests verify behavior, but they miss React performance, accessibility, and quality issues.
Topcoat is a modular, batteries-included Rust framework for building fullstack apps. It prioritizes simplicity and productivity.
Self-hostable instant messaging server compatible with classic AIM and ICQ clients written in golang. (Independently developed, not affiliated with or endorsed by AOL)
A Kubernetes controller that generates CycloneDX 1.6 ML-BOM documents for AI workloads at runtime — inference services, agent stacks, RAG pipelines, training jobs, evaluation harnesses — with auditor-traceable evidence for every attribute.
Related contents:
The web, wired into your local agent.
wigolo is a local-first server that hands any AI agent the whole web — search, fetch, crawl, extract, cache, and research. In your editor over MCP, in your framework through an SDK, or in your self-hosted stack over REST. No API keys. No cloud. No metered bill.
An agent skill — for Claude Code, Codex, and any SKILL.md-compatible agent — that builds an immersive, scroll-scrubbed "fly through the world" landing page for any industry or brand — the kind where, as you scroll, a camera flies from outside each scene into its interior, then flows on to the next scene with no cuts. One continuous connected flight through a little generated world (think the Emons logistics site, applied to whatever you want).
See every VM in your Proxmox environment. VM Inventory & Capacity Planning for Proxmox VE.
PVEViewer connects to your Proxmox VE clusters over the REST API and turns them into a rich, multi-tab Excel workbook and live, filterable grids for inventory, health, and capacity planning in one click. No agents to deploy. No history database. Just answers.
Related contents:
A personal internet radio station. One Icecast stream, one broadcast. Every listener hears the same thing at the same time. An AI DJ picks the tracks and talks between them: station idents, time checks, the weather, a quick intro for whatever's going out next. You can ask for music in plain language; the DJ works out what you meant and slots it in.
Related contents:
A Mastodon instance for info/cyber security-minded people.
CLI to control iOS and Android devices for AI agents . The mobile verification for AI Agents.
Device automation CLI for AI agents. Real apps on iOS, Android, TV, and desktop. Token-efficient snapshots, semantic refs, evidence captured only when needed.
Self-Hosted AI Chat Dashboard.
Web dashboard for Hermes Agent — multi-platform AI chat, session management, scheduled jobs, usage analytics.
Fleet visibility dashboard and ingest server for Bumblebee scans.
Run the Hive server, point developer endpoints at it with --output http, and browse fleet inventory, exposure findings, and per-endpoint scan history in a React dashboard — no log shipper or custom receiver required.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
Security scanner for VS Code extensions.
Security scanner for VS Code extensions. Detects malicious extensions before installation by analyzing code patterns, indicators of compromise, and known malware signatures.
push frontier AI to it limits. A fork of the Codex CLI with validation, automation, browser integration, multi-agents, theming, and much more. Orchestrate agents from OpenAI, Claude, Gemini or any provider.
Every Code (Code for short) is a fast, local coding agent for your terminal. It's a community-driven fork of openai/codex focused on real developer ergonomics: Browser integration, multi-agents, theming, and reasoning control — all while staying compatible with upstream.
Knex.js is a batteries-included SQL query builder for JavaScript.
Knex.js (pronounced /kəˈnɛks/) is a "batteries included" SQL query builder for PostgreSQL, CockroachDB, MSSQL, MySQL, MariaDB, SQLite3, Better-SQLite3, Oracle, and Amazon Redshift designed to be flexible, portable, and fun to use.
An iMessage-based personal agent you can run with either your Claude Code subscription or your Codex / ChatGPT subscription.
iMessage personal agent: choose Claude Agent SDK (Claude Code) or Codex app-server runtime (Codex/ChatGPT), with memory, sub-agents, automations, integrations.
Dynamic memory for coding agents: chart discoveries as you explore, cache-bust when files change.
Don't grep the same mystery twice.
Persistent memory for coding agents. When your agent spends ten minutes figuring out where something lives in your codebase, capn saves the files that answer the question. The next session gets them back in one command instead of re-exploring — and the moment the underlying files change, the saved answer deletes itself.
An open-source router that you can manage from a browser, a terminal CLI, or directly from your AI agents (Claude Desktop, OpenCode, Cline, GitHub Copilot). Born as a router-on-a-stick for the Le Potato (or any ARM SBC running Armbian/Ubuntu), it also installs and runs on x86 — mini-PCs, thin clients, and VMs — where it adapts the network topology to however many NICs the box actually has. Manages 802.1Q VLANs, DHCP, DNS, firewall rules, static routes, and VPN (Tailscale, WireGuard, Nebula) — all from a browser, over SSH, or through a standard MCP server. Still a potato at heart either way.
Related contents:
Because your AI shouldn't hallucinate package names.
Real, up-to-the-second information about NixOS packages, options, Home Manager, nix-darwin, flakes, and friends — served over the Model Context Protocol.
Related contents:
The best and easiest way to storyboard.
Storyboarder makes it easy to visualize a story as fast you can draw stick figures. Quickly draw to test if a story idea works. Create and show animatics to others. Express your story idea without making a movie.
Related contents:
An OS 9 browser that loads the modern web. the modern web, on a 25-year-old Mac.
MacSurf is a native web browser for Classic Mac OS 9 — real CSS3, modern JavaScript (ES2023 via macQJS), and native TLS 1.3, running on a 25-year-old Mac.
Related contents:
A pattern for building personal knowledge bases using LLMs.
This is an idea file, it is designed to be copy pasted to your own LLM Agent (e.g. OpenAI Codex, Claude Code, OpenCode / Pi, or etc.). Its goal is to communicate the high level idea, but your agent will build out the specifics in collaboration with you.
Related contents:
camply, the campsite finder ⛺️, is a tool to help you book a campsite online. Finding reservations at sold out campgrounds can be tough. That's where camply comes in. It searches thousands of campgrounds across the USA world via the APIs of booking services like recreation.gov. It continuously checks for cancellations and availabilities to pop up - once a campsite becomes available, camply sends you a notification to book your spot!
Related contents: