Keygate

Warpgate is a self-hosted, transparent bastion and privileged-access-management system for SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP, and VNC. Deployed on a bastion or DMZ host, it assigns users to specific hosts and URLs and forwards connections directly to their targets without requiring client-side software, SSH wrappers, or custom clients. Native clients remain compatible, while browser-based SSH, RDP, and VNC access is also provided. Warpgate records sessions for live viewing and later replay through an administrative web UI, with command-level auditing. It includes TOTP two-factor authentication, OpenID Connect single sign-on, temporary access tickets, brute-force protection with IP blocking and user lockout, and is distributed as a dependency-free single binary written in Rust.

SnagTime is a free, self-hostable scheduling application that provides account and workspace management, event types, availability rules, public booking links, time-zone handling, custom booking questions, rescheduling, cancellation, and recovery links. It checks Google Calendar free/busy status and can create calendar events, sends organizer and invitee messages through SMTP, and supports Stripe Checkout in test mode with webhook confirmation and refund handling. The local demo uses SQLite, a local calendar adapter, a local email inbox, and stub payments; production deployments use a PostgreSQL architecture with a web service, background worker, persistent database, and webhook endpoints. The application is a Next.js project with Prisma schemas and migrations, distributed under the MIT License. It is intended for self-hosting rather than as a managed service; external Google Calendar, SMTP, Stripe, hosting, domain, and database services must be supplied and configured by the operator.

QueryAPIGate is a self-hosted service that turns saved SQL queries into versioned, governed REST endpoints. It connects to databases including PostgreSQL, MySQL, ClickHouse, SQLite, DuckDB, H2, MongoDB and generic JDBC sources, and can query Parquet, CSV and JSON files through DuckDB. Its built-in console provides SQL editing, schema browsing, query testing and API publication. Each saved query becomes a versioned endpoint with typed, injection-safe parameters, field-level validation, pagination, streaming exports and response formats including JSON, NDJSON, XML, YAML, CSV, TSV, Excel and Parquet. The service includes API-key authentication, scoped permissions, roles, collections, rate limits, IP restrictions, optional JWT-based sign-in, SQL-guarded execution, connection pooling, caching, run history, audit logs, OpenAPI output, Prometheus metrics, live SSE events and an administrative UI. It can also expose saved queries as MCP tools for AI agents. QueryAPIGate is distributed as a Python package and Docker images. The repository describes it as source-available under the Functional Source License 1.1 with the MIT Future License; it is not currently an OSI-approved open-source license, and versions become MIT-licensed two years after release.

Kairos is an open-source, real-time fraud and risk decisioning platform from Finic. It evaluates sign-ups, logins, orders, payments, payouts and other events, returning an approve, step-up, review or block decision with a risk score and the signals behind it. Its workflows can query decision models, score events with logistic regression or gradient-boosted trees, branch on results, call webhooks, open review cases and make later decisions. The Grayson decision model answers plain-language questions about structured and unstructured data; its answers can be combined with transaction fields as features for traditional machine-learning models. Kairos also supports experiments that train and compare model variants on historical data before publishing a winning workflow version. The platform provides an MCP server for Claude Code, Cursor, Codex and other agents, enabling agents to inspect decisions, build workflows and run experiments with actions recorded under an agent key. It includes TypeScript and Python SDKs, a CLI, an HTTP API, a web console and Docker-based self-hosting, with Postgres managed by the server. The repository is licensed under Apache License 2.0.

Paperclip is an open-source, self-hosted control plane for organizing and running teams of AI agents. Its Node.js server and React UI let users define company goals, assign agents roles and tasks, and monitor work, budgets, approvals, costs, and audit activity from a shared dashboard. Agents run through scheduled or event-based heartbeats. The system maintains organization charts, goal ancestry, task dependencies, persistent session state, isolated workspaces, scoped secrets, runtime skill injection, and atomic task checkout with budget enforcement. It supports agent adapters and runtimes including Claude Code, Codex, Cursor, Bash, HTTP/webhook agents, and plugins; recurring routines can create tracked issues and wake assigned agents. Paperclip supports multiple isolated companies in one deployment, governance and approval gates, cost hard stops, agent pause/resume/termination, company export and import with secret scrubbing, and optional OpenTelemetry and Sentry integrations. It can be installed through the Paperclip CLI or run from source; local setups use embedded PostgreSQL and file storage, while production deployments can use an external PostgreSQL database. The project is distributed under the MIT license.