Tools with a web UI

Free / OSS · AGPL-3.0 · 10.7k GitHub stars

VerdictAGPLv3 metering. Self-host or talk to sales — there is no hobby cloud.

CatchPremium is Contact us. There is no $0 Lago Cloud. Self-host is the free path; Cloud and Premium are quotes. AGPLv3 is network copyleft.

Free / OSS · Freemium · 14.6k GitHub stars

VerdictApache-2.0 IdP. Self-host primary; Hosted Free 25k MAU.

CatchUI-first IdP — vs Keycloak/authentik/Kanidm/Logto/Hanko/Zitadel. Hosted Free 25k MAU; self-host uncapped. Distinct from Keycloak, authentik, Kanidm, Logto, Hanko, and Zitadel.

Free / OSS · OSS/MIT · 1 GitHub stars

VerdictMIT Paddle Billing CLI. Free tool; Paddle merchant + MoR fees separate.

CatchCommunity CLI — not an official Paddle Inc product; API drift risk. Still need a Paddle merchant account (MoR fees apply). Vs Stripe CLI: Paddle-only. Thin MCP forks exist; this is the general CLI.

Free / OSS · Apache-2.0 · 24.4k GitHub stars

VerdictApache-2.0 GitOps CD. Free on-cluster; Flux is the toolkit cousin.

CatchVs Flux: UI/app-centric GitOps CD lane, not Flux Toolkit. Still K8s-only. You run the control plane, secrets, and promotion story. Not Kamal/Coolify for VMs.

Free / OSS · Apache-2.0 · 35k GitHub stars

VerdictApache-2.0 host resource TUI. Free forever; use when the machine in front of you is the thing to watch.

CatchVs Grafana/Prometheus (fleet metrics + dashboards): btop is *local host* TUI, not a scrape/store/alert stack. Pick it over bottom, the Rust twin. Not a remote multi-node observability product.

Free / OSS · Freemium · 4.6k GitHub stars

VerdictWorkers CLI with a real Free plan. Free to develop; pay Cloudflare when traffic or CPU leaves the free envelope.

CatchTied to Cloudflare’s platform: Free → Standard paid usage when you exceed quotas. Not a generic Node host and not Docker-on-VPS. Local emulation is good, production semantics still Cloudflare’s. Account + API token required to ship.

Free / OSS · GPL-3.0 · 4.5k GitHub stars

VerdictGPL-3.0 DNS CLI. Free forever queries; the Catch is copyleft, not a free DNS product seat.

CatchGPL-3.0 copyleft — fine for a CLI on your laptop; read the license before embedding into proprietary SaaS. Vs dig/nslookup (OS stock) and vs dog (Rust, quieter upstream): doggo is the maintained Go dig-with-DoH lane, not a recursive resolver and not dig dialect-complete. You still pick the upstream resolver.

Free / OSS · OSS/MIT · 14.7k GitHub stars

VerdictMIT live container log UI. Lightweight tail vs full observability stacks.

CatchVs Grafana/Loki, ELK, Datadog (full observability): Dozzle is lightweight realtime log UI, not metrics/traces/storage/retention. If the container is gone, so is the history Dozzle never kept. Pair with a real log backend when you need audit trails.

Free / OSS · OSS/MIT · 49.2k GitHub stars

VerdictMIT personal agent runtime. Self-host when you want MCP + memory + chat bridges in a small Python core.

CatchYou operate the host, keys, and chat-app credentials; “ultra-light” still means a long-running service. Young surface with a large issue backlog — pin versions for production. Vs OpenHands / LibreChat (heavier coding or multi-model chat stacks) and OpenBot (governed coworker computers): nanobot is the small personal gateway, not a full browser-cowork platform or a repo-coding agent.

Free / OSS · OSS/MIT · 253k GitHub stars

VerdictMIT plugin agent harness when you want Cordis-shaped extensibility and will treat preview APIs plus SAFETY.md as real constraints.

CatchVs DeerFlow and OpenHands: this is a Cordis plugin-harness + Web UI from DeepSeek, not a ByteDance SuperAgent product tree or an open coding agent alone. Developer preview with explicit COMPATIBILITY-BREAKING CHANGES; SAFETY.md says no security audit, model/plugin code can damage the host — prefer a disposable VM/container. Extreme star velocity (~235k aria-label) is discovery noise, not proof.

Free / OSS · Open-Core · 156k GitHub stars

VerdictSource-available Ollama/OpenAI chat UI when polished local RAG chat beats building one — branding rules are the Catch vs LibreChat MIT.

CatchBranding lock — removing “Open WebUI” marks is forbidden above ~50 end users / 30 days without written permission or enterprise license (not OSI MIT/Apache). Vs LibreChat (MIT Agents/MCP/skills orchestration UI): LibreChat leans Agents/MCP/skills; Open WebUI leans Ollama-first chat+RAG+admin. You still BYO models, GPU, and upgrade discipline.

Free / OSS · Apache-2.0 · 9.5k GitHub stars

VerdictApache harness control plane when you need discover/route/trace over many coding agents — not Paperclip budgets, not Zeron device sync.

CatchVs Paperclip / Zeron / ECC: Paperclip is Board/budget company OS; Zeron is multi-device session drive; ECC is skills/memory/security pack — Nasiko’s catch is harness discovery + routing/trace control plane. Still early operator UX; confirm which harnesses are first-class before you bet a fleet on it.

Free / OSS · Apache-2.0 · 3.9k GitHub stars

VerdictApache-2.0 K8s web UI + MCP when day-2 cluster visibility belongs in a browser — OSS binary free forever; Cloud is the paid multi-cluster/SSO line; watch the star heat.

CatchBrowser UI, not a terminal — if you live in kubectl/k9s only, this is a different seat. The MCP reads and operates through Radar’s cluster context; it does not run agents for you. Scope RBAC tightly: whatever the kubeconfig can do, the UI and MCP can attempt. Paid Radar Cloud adds hosted multi-cluster and SSO while the OSS binary stays free. ★ climbed fast for the project’s age (~3.6k in under a year) — judge it on substance (views, MCP, single binary), not the badge. Young product; pin a release.

Free / OSS · OSS/MIT · 132k GitHub stars

VerdictThe default local LLM engine — free, runs nearly anywhere, but you own the model choice and the tuning.

CatchIt runs GGUF models, so you convert or download quantized weights, and model licences are separate — check the model card before commercial use. Lots of knobs: speed depends on backend, quant and offload settings, so expect to tune. Vs Ollama (friendlier model manager on similar ground): pick llama.cpp when you want the engine and its flags directly. Vs vLLM or SGLang: those are GPU serving engines for many concurrent users; llama.cpp is the one for laptops, edge boxes and single-user servers.

Free / OSS · Apache-2.0 · 2k GitHub stars

VerdictThe most complete open setup for trying agent teams today — pin a preview tag and expect your config to change.

CatchIt needs a container runtime: Podman, Docker or Apple Container (Kubernetes or Cloud Run for hosted runs). There are no GitHub releases yet, only preview tags such as v0.3.0-preview.3, and the README warns that the project is evolving rapidly and APIs and configuration may change. It is from a Google Cloud repo but, in its own words, not an officially supported Google product. Every agent still runs on your own model keys and their token costs.

Free / OSS · AGPL-3.0 · 11.6k GitHub stars

VerdictA handy Nginx admin panel for a small fleet — lock it down before you turn on the MCP side.

CatchIt is a control panel with root-level power over your web server: never expose it to the internet without strong auth, and put it behind a VPN or allowlist. The MCP interface hands an agent the same power, so scope it carefully. AGPL-3.0 matters if you modify it and offer it to others over a network. Much of the community and docs traffic is in Chinese.

Free / OSS · GPL-3.0 · 33.2k GitHub stars

VerdictThe homelab dashboard most people end up on — clean, fast and Docker-aware.

CatchIt is a dashboard, not monitoring: it shows status but does not alert you. Configuration is hand-edited YAML, and complex layouts take trial and error. Do not expose it publicly without auth in front, since it can reveal what you run.

Free / OSS · AGPL-3.0 · 37.5k GitHub stars

VerdictThe nicest way to turn your daily feeds into one fast page — a reader, not a control panel.

CatchConfiguration is YAML only, with no editor in the UI. It is a reading dashboard, not an app launcher with integrations as deep as Homepage. Still pre-1.0. Stars have grown fast (about 290 a week since 2024), but this is an established, actively released project.

Free / OSS · OSS/MIT · 26.7k GitHub stars

VerdictPick Dashy if you want to tweak every pixel of your dashboard from the browser.

CatchIt overlaps heavily with Homepage; Dashy leans toward UI customisation, Homepage toward service widgets. The Vue frontend is heavier than minimal dashboards like Glance or Homer. Status checks are simple pings, not alerting.

Free / OSS · GPL-3.0 · 7.7k GitHub stars

VerdictThe friendliest way to run restic on a NAS or server — restic underneath, so your backups stay portable.

CatchIt is a wrapper, so restic's model (and its repository format) is what you are really adopting. It manages backups on the machine it runs on; it is not a central server for a fleet. Mostly a single-maintainer project.

Free / OSS · GPL-3.0 · 12.8k GitHub stars

VerdictA capable open alternative to Portainer for a small fleet of Docker servers.

CatchIts own README warns there are no warranties and to use it at your own risk. You run a core server plus an agent on each host, so it adds moving parts. It is Docker-centric, not a Kubernetes replacement. Smaller community than Portainer.

Free / OSS · Apache-2.0 · 2.5k GitHub stars

VerdictWatch it if you want vendor-neutral dashboards as code; most teams still default to Grafana.

CatchStill 0.x and much younger than Grafana, with far fewer plugins and data sources. Best suited to teams that want dashboards-as-code or embedding, not a full Grafana replacement today.

Free / OSS · Apache-2.0 · 1.8k GitHub stars

VerdictA much nicer `kubectl logs -f` for whole workloads.

CatchIt reads what the cluster still holds, so it does not replace a log store for history or search across days. Large clusters with chatty workloads can strain the API server. Still pre-1.0.

Free / OSS · GPL-3.0 · 6.6k GitHub stars

VerdictThe easiest LDAP backend for a self-hosted stack.

CatchIt is deliberately not a full LDAP server: schema and features are limited, so some enterprise apps will not work. Still 0.x. Pair it with an SSO layer like Authelia for modern login flows.

Free / OSS · OSS/MIT · 45.7k GitHub stars

VerdictThe standard open-source tool for seeing exactly what an app sends.

CatchYou have to install and trust its CA certificate on the device, and apps that pin certificates won't work without extra steps. The last release was in May, though commits continue. Use it only on traffic you are allowed to inspect.

Free / OSS · GPL-3.0 · 139k GitHub stars

VerdictThe default local engine for generative media pipelines — keep custom nodes to ones you trust.

CatchIt is an engine you operate, not a one-click generator: node graphs have a learning curve, and the large custom-node ecosystem is third-party Python you are running with full access to your machine, so vet what you install. Real speed needs a decent GPU. Comfy Cloud and the partner nodes for closed models are paid; the local engine is free. GPL-3.0 matters if you plan to redistribute a modified build.

Free / OSS · AGPL-3.0 · 41.1k GitHub stars

VerdictA solid self-hosted Retool alternative — pick the community edition knowingly.

CatchThe AI features (app generation, AI query builder, agent builder) are Enterprise, and the README's quick-start Docker image is the enterprise LTS build, so check what you are running. The MCP server is in beta. AGPL-3.0 matters if you modify it and offer it as a service. Appsmith is the closest alternative.