NocoBase: review, pricing, security and alternatives

What NocoBase does

NocoBase belongs to the automation family: platforms, often visual, that chain steps, apps and models into workflows with or without an agent. On our grid it ranks #12 of the 26 projects of this family listed in the directory.

You use it from: web app and API. It can run on your own machine or server.

Who is NocoBase for?

It is for teams that want to connect their tools (CRM, e-mail, spreadsheets) and hand the AI the steps that require reading or deciding. Typical tasks people give it:

• qualify incoming requests and route them
• extract data from documents into a spreadsheet
• generate periodic reports

It is a good candidate if you prefer doing everything in a browser, with no install and your data must stay on your machines.

Access and human control

Its documentation does not detail the access granted to the agent: check the settings before connecting it to your accounts.

We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.

NocoBase pricing

The code is public but the repository declares no licence: reuse is not formally allowed. The real cost comes from model calls: each loop step sends the whole context back to the model, and a task of several dozen steps can cost far more than a single question. The LLM price calculator estimates it for the chosen model.

Getting started with NocoBase

1. Install it: the project ships as a Node.js package (install with npm, or run directly with npx). The exact command is in the repository README.
2. Create an API key with the model provider and put it in an environment variable, never in a shared or versioned file.
3. Give it a first playground with nothing at stake: a test folder, a secondary account or a throwaway project. Only open your real accounts once you have seen how it behaves.
4. Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.

Security: risk level

A workflow runs unattended: limit the credentials it holds and log what it sends.

Points found for NocoBase:

• No licence: legally shaky for company use.

Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.

Project activity and releases

Created on October 24, 2020, the nocobase/nocobase repository has 24,692 stars, 2,935 forks and 112 open issues, with 18,273 commits in total. It received changes this month.

Over the last 52 weeks: 4,628 commits, an average of 89 per week.

834 releases in total; 7 in the last twelve months. Latest release: v2.2.31, on October 23, 2026.

NocoBase vs other automation

GitHub stars of the best-rated open-source projects in the automation family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.

NocoBase and other automation at a glance

The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.

How we rated it

Score: 69/100, computed only from public, verifiable data, with no subjective testing or partnership:

• Adoption 29/40: 24,692 stars on a log scale (40 points from about 200,000).
• Activity 30/30: last commit less than a month ago, 7 releases in six months, 4,628 commits in a year.
• Framework 10/30: licence, default human approval, self-hosting, model choice and documentation site.

The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.