Projects sharing features with Keyhacks

Vendure is a Node.js e-commerce engine and headless commerce framework built with NestJS and TypeScript. It serves as a multi-channel commerce platform that manages product catalogs, orders, and customers via a strongly typed GraphQL API. The platform is distinguished by its highly extensible architecture, featuring a customizable administrative dashboard where developers can inject custom React components and entity views. It supports multi-channel commerce, allowing the isolation of products, currencies, and regional catalogs from a single unified backend. The engine covers a broad range o

This project provides a translation layer and set of adapters designed to bridge AI agents with the Model Context Protocol. It functions as an integration layer that allows agents to operate as protocol-compliant servers and enables the conversion of protocol-based tools into formats compatible with agent frameworks and logic graphs. The adapters facilitate tool interoperability by wrapping external protocol tools for use within agent workflows and exposing internal agent capabilities to any client implementing the Model Context Protocol. This creates a communication bridge that supports inte

Fingerprint is a visitor identification and fraud detection platform that generates persistent, unique identifiers by analyzing browser and device attributes. By extracting technical signals from the client environment, it enables reliable user tracking across sessions without relying on traditional cookies. The platform distinguishes itself through its focus on high-accuracy identification and security-first architecture. It employs edge-side proxying to bypass ad-blockers and privacy restrictions, ensuring consistent data collection. To maintain data integrity, it uses cryptographic payload

Unkey is an API key management platform and gateway control plane designed for issuing, verifying, and revoking secure keys with global distribution. It provides the infrastructure necessary to authenticate requests and authorize access to protected resources with low latency. The platform distinguishes itself through edge-based request authentication and distributed rate limiting, which allow for the verification of keys and enforcement of request quotas at the network edge. It also features a usage-based billing engine and a self-service developer portal, enabling the tracking of metered AP

This project provides a suite of development kits and frameworks for interacting with Slack, including a Web API client for authenticated requests and the Bolt framework for building asynchronous applications. It serves as a SDK for creating automated bots and integrating external software systems with Slack workspaces. The toolkit includes a specialized Events API client for listening to real-time system triggers and executing custom callback logic. It supports the development of automated assistants capable of sending messages and managing data exchanges via webhooks. The library covers a

This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure mapping. It functions as a security-focused scanner that identifies hidden files, directories, parameters, and virtual hosts by injecting payloads into HTTP requests. By systematically testing how servers handle various inputs, it assists in mapping the architecture of web applications and uncovering potential security vulnerabilities. The tool distinguishes itself through a highly concurrent engine that manages asynchronous request execution and recursive job orchestration. I

node-oauth2-server is an OAuth2 server implementation for Node.js that functions as an authorization provider. It enables the creation of a centralized server to manage client registration and issue access tokens for third-party applications using the OAuth2 protocol. The project operates as Node.js middleware, integrating authorization logic directly into web application request pipelines. It provides a bearer token validator to verify identity and permissions by checking security tokens within incoming HTTP request headers. The system covers API access control, token management, and user a

Gauzy is an open business management platform and multi-tenant enterprise resource planning system. It provides a modular business framework designed to manage core organizational operations through a unified web interface or as a headless business API. The platform is distinguished by its integration with the Model Context Protocol, allowing it to act as a server that exposes business data and system functions as tools for AI assistants. It utilizes a dynamic plugin architecture and a dedicated marketplace to extend core business entities and services. The system covers a broad range of ope

This project is an OAuth 2.0 client library and OpenID Connect SDK designed for integrating Microsoft identity platforms into JavaScript applications. It serves as a cross-platform authentication client for managing user identities and daemon services across browser-based and server-side environments. The library provides tools for acquiring and managing JSON Web Tokens to secure access to protected web APIs. It supports various authentication flows, including single-page application authentication, server-side identity management in Node.js, and non-interactive authentication for background

Kill Bill is a subscription billing platform and usage-based billing engine designed to manage recurring invoicing and automated payment collection. It functions as a multi-tenant billing infrastructure, providing isolated environments for different organizational entities through a dedicated API. The system is distinguished by a plugin-based extension framework that allows for the integration of third-party payment gateways and custom business logic. It includes a payment gateway orchestrator to handle transactions and refunds, as well as a revenue recognition system to allocate contract rev

Unity MCP is a plugin that connects the Unity Editor to AI assistants through the Model Context Protocol, enabling natural language control over scene manipulation, object creation, and editor workflows. It allows developers to generate C# scripts, modify GameObjects and components, create UI layouts, and manage assets by issuing commands through an AI interface, effectively turning the editor into a conversational development environment. The plugin distinguishes itself through a comprehensive automation system that can execute multi-step tasks from a design document, record and replay edito

DeepReasoning is a self-hosted AI gateway and chat interface that provides an LLM inference API. It functions as a bridge that merges reasoning traces from DeepSeek R1 with the generative capabilities of Claude models to facilitate complex problem solving. The system is delivered as a dockerized application, allowing for deployment on private infrastructure. This architecture enables private LLM inference and secure local management of API keys and authentication tokens on user-controlled hardware. The project covers multi-model orchestration by combining chain-of-thought reasoning and gener

This project is a PHP library for implementing a spec-compliant OAuth 2.0 authorization server. It serves as an authentication framework for managing user identities and client authorizations, providing the necessary components to issue and validate access and refresh tokens. The server supports a wide range of standardized authorization flows, including authorization code exchange, device grants, implicit flows, and PKCE enforcement. It handles complex token lifecycles through refresh token rotation, scope management, and the use of asymmetric keys for signing digital tokens. The system pro

Botkit is a multi-platform chatbot framework designed to build conversational bots that operate across different messaging services using a unified interface. It provides a core system for multi-platform development, utilizing a platform adaptation layer to translate service-specific API payloads into a standardized internal format. The framework features a conversational dialog manager that coordinates multi-turn interactions through state-tracking, branching logic, and scripted flows. It employs a message processing middleware pipeline to intercept, normalize, and enrich incoming and outgoi

SwanLab is an open-source machine learning experiment tracking platform and observability tool. It provides a centralized dashboard for logging training metrics, hyperparameters, and hardware performance to monitor and analyze AI model training runs. The platform is distinguished by its focus on self-hosted infrastructure, allowing users to deploy private instances via Docker or Kubernetes for secure on-premises data control. It also includes specialized utilities for migrating historical experiment logs and synchronizing real-time metrics from external tools like MLflow. The system covers a

CodexBar is a macOS menu bar application that monitors AI provider usage limits, credit balances, and reset schedules. It retrieves coding plan usage data from Alibaba Cloud services using either API keys or browser session cookies as fallback authentication, and displays the information through visual credit gauges, CLI commands, and desktop status bar integrations. The application distinguishes itself by supporting multiple authentication methods, including automatic cookie import from Safari, Chrome, or Firefox, as well as API key and access token authentication. It provides real-time trac

gpt-load is a transparent proxy gateway that routes API requests to multiple AI providers—including OpenAI, Google Gemini, and Anthropic Claude—through a single endpoint while preserving each provider's native format and authentication. It acts as a centralized routing layer, allowing applications to switch between AI services by changing only the base URL without modifying any client code or business logic. The proxy distinguishes itself through intelligent traffic management across pools of API keys, offering automatic key rotation, weighted or round-robin load balancing, and failover that

Pushdeer is a self-hosted push notification service designed to deliver instant alerts to mobile devices and IoT hardware. It functions as a centralized backend for managing and routing custom notifications via a private server. The system is distinguished by its appless push notification capability, which leverages native operating system features to receive alerts without requiring a dedicated client application installed on the handset. For IoT integration, it operates as a messaging gateway using the MQTT protocol to send real-time text and image notifications to smart hardware. The plat

This project is an OAuth security framework for Java web applications. It provides a set of tools for adding authentication and authorization to Spring applications using standardized delegated authorization protocols. The library implements both OAuth 1.0a and OAuth 2.0 standards. For OAuth 2.0, it includes implementations for both the client side, to request access tokens and consume protected resources, and the provider side, to issue access tokens and manage authorization grants. The framework covers API authorization workflows, securing communication between applications, and managing d

Papercups is an open-source live chat platform and self-hosted customer messaging system. It provides a real-time communication infrastructure consisting of an embeddable web widget for customers and a containerized administrative dashboard for support teams. The platform features an omnichannel messaging hub that aggregates and normalizes conversations from email, SMS, and third-party chat channels into a single unified stream. It also includes a framework for deploying automated FAQ chatbots to handle initial inquiries and a real-time session monitoring tool that allows agents to view a use

Open-SWE is an asynchronous software engineering agent and orchestrator designed to automate end-to-end coding tasks and pull request reviews. It functions as a middleware framework that coordinates long-running AI operations across multiple subagents, utilizing state persistence and human-in-the-loop oversight to manage complex workflows. The system is distinguished by its use of isolated remote Linux sandboxes for secure code execution and shell command processing. It features a webhook-driven integration platform that triggers automated engineering tasks via mentions and events in GitHub,

Public Slack organizations made easy

Casdoor is a centralized identity and access management platform that functions as an OAuth 2.0 authorization server. It provides a comprehensive suite of services for managing user identities, authentication sessions, and access policies across both web and machine-to-machine applications. Built with a decoupled frontend-backend architecture in Go, the platform supports high-concurrency environments and offers a web-based management interface for administrative tasks. The platform distinguishes itself through its extensive support for federated identity management, allowing integration with

CloudPaste is a secure file sharing platform and multi-backend storage aggregator. It unifies local and S3-compatible cloud storage providers into a single managed file system, serving as a gateway for centralized file access and distribution. The platform distinguishes itself through a built-in browser-based Markdown editor for composing documents with formulas and diagrams. It provides secure content sharing using password protection, expiration dates, and path-restricted API keys to control programmatic access and visibility. The system covers broad capabilities in file management, includ

Cronicle is a distributed job scheduler that replaces traditional cron with a browser-based management interface. It runs scheduled tasks across a cluster of servers with automatic failover, using a custom cron parser that intersects day-of-month and day-of-week constraints when both are specified. The system executes jobs through a plugin framework that runs command-line scripts in any language, communicating via JSON over standard input and output. The scheduler provides a web-based real-time dashboard for monitoring running jobs with live logs, resource usage charts, and progress updates.

Inbox Zero is an AI-powered email automation platform and inbox organizer. It uses large language models to automatically categorize, label, and archive emails, while providing a conversational interface for managing workflows and drafting responses through natural language. The project distinguishes itself by integrating real-time calendar availability into its drafting process and generating AI-summarized meeting briefings. It supports a pluggable AI provider interface with model fallback chains, allowing it to connect to various cloud or local LLM providers. Users can also control their in