Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
An open-source background agents coding system
| Date | Stars |
|---|---|
| 2026-07-31 | 2592 |
| 2026-08-01 | 2598 |
| 2026-08-03 | 2598 |
| 2026-08-06 | 2598 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
0.0
growth rate 0.00%/day
# Background Agents: Open-Inspect
An open-source background agents coding system inspired by
[Ramp's Inspect](https://builders.ramp.com/post/why-we-built-our-background-agent).
## Overview
Open-Inspect provides a hosted background coding agent that can:
- Work on tasks in the background while you focus on other things
- Access full development environments (Node.js, Python, git, browser automation, VS Code)
- Connect from anywhere — web UI, Slack, GitHub PRs, Linear issues, or webhooks
- Enable multiplayer sessions where multiple people can collaborate in real time
- Create PRs with proper commit attribution to the prompting user
- Run on a schedule — cron jobs, Sentry alerts, and webhook-triggered automations
- Spawn parallel sub-tasks that work in separate sandboxes simultaneously
- Use your choice of AI model — Anthropic Claude, OpenAI Codex (via ChatGPT subscription), xAI Grok
(via SuperGrok subscription), or OpenCode Zen
## Security Model (Single-Tenant Only)
> **Important**: This system is designed for **single-tenant deployment only**, where all users are
> trusted members of the same organization with access to the same repositories.
### How It Works
The system uses a shared GitHub App installation for git operations (clone, fetch, push). The
control plane mints short-lived installation tokens server-side and brokers them to sandboxes
through the git credential helper on demand. This means:
- **All users share the same GitHub App credentials** - The GitHub App must be installed on your
organization's repositories, and any user of the system can access any repo the App has access to
- **No per-user repository access validation** - The system does not verify that a user has
permission to access a specific repository before creating a session
- **GitHub users' OAuth tokens are used for PR creation** - For GitHub logins, PRs are created using
the user's GitHub OAuth token, ensuring proper attribution and that they can only create PRs on
repos they have write access to. Users who sign in another way (e.g. Google) carry no SCM token,
so their PRs fall back to the shared GitHub App bot
### Token Architecture
| Token Type | Purpose | Scope |
| ------------------ | -------------------------------------- | -------------------------------- |
| GitHub App Token | Brokered git clone/fetch/push auth | All repos where App is installed |
| User OAuth Token | Create PRs, user info | Repos user has access to |
| Sandbox Auth Token | Sandbox-to-control-plane session calls | Single session |
| WebSocket Token | Real-time session auth | Single session |
### Why Single-Tenant Only
This architecture follows
[Ramp's Inspect design](https://builders.ramp.com/post/why-we-built-our-background-agent), which was
built for internal use where all employees are trusted and have access to company repositories.
**For multi-tenant deployment**, you would need:
- Per-tenant GitHub App installations
- Access validation at session creation
- Tenant isolation in the data model
### Deployment Recommendations
1. **Deploy behind your organization's SSO/VPN** - Ensure only authorized employees can access the
web interface
2. **Install GitHub App only on intended repositories** - The App's installation scope defines what
the system can access
3. **Restrict sign-in** - Configure allowed GitHub users, email domains, or active GitHub
organization membership (`ALLOWED_GITHUB_ORGS`)
4. **Use GitHub's repository selection** - When installing the App, select specific repositories
rather than "All repositories"
## Architecture
```
┌──────────────────┐
│ Clients │
│ ┌──────────────┐ │
│ │ Web / Slack │ │
Excerpt of 15,193 characters
Read on GitHub
Cole Murray · United States
793
51
31
15
8
6
4
4
4
3
3
3
3
2
2
2
2
2
Vladimir Gurovich · Zillow Group · United States
2
2
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:407b74da38f1de14, llm:repository name and description: 'background-agents' — 'An open-source background agents coding system' (TypeScript)
matched fp:407b74da38f1de14, llm:repository name and description: 'background-agents' — 'An open-source background agents coding system' (TypeScript)