Bonsai vs NocoBase

NocoBase is an open-source no-code/low-code platform shipping on two parallel tracks: a stable beta (2.3.x) and an alpha preview (2.4.x). Both tracks are active—the same features land in alpha first, then backport to beta within days. The most significant recent addition is an authenticated knowledge base retrieval API with a built-in provider for remote NocoBase knowledge bases, giving AI employees in workflows access to structured external content for RAG-style lookups. Security improvements are also landing: blocking server-side requests to literal IP addresses and preventing secret env var exposure in custom request URLs.

NocoBase is building out its AI employee and workflow AI layer systematically: context data source settings were simplified in alpha.3, and now the knowledge base retrieval API adds a retrieval-augmented generation primitive that no-code users can wire into workflows without writing code. The WeCom and DingTalk integrations continue to mature, signaling a Chinese enterprise market focus alongside international adoption. Security hardening (XSS prevention, SSRF mitigations) is getting attention across releases, suggesting enterprise deployments with compliance requirements.

NocoBase will expand the AI knowledge base surface—likely adding vector search providers, fine-grained access control for knowledge bases, and richer AI employee configuration tied to specific knowledge domains. Expect the 2.4.0 release line to formalize AI employees as a stable feature alongside the knowledge base API.