LoginSign Up
← Back to all sparks
N

NocoBase

PM
Velocity8.8

Open-source no-code platform for building internal business applications.

www.nocobase.com ↗

NocoBase adds an AI knowledge base retrieval API, connecting no-code workflows to external knowledge sources.

no-codeai-workflowsknowledge-baseopen-sourceenterpriseworkflow-automation
◆Current state
NocoBase is an open-source no-code/low-code platform shipping on two parallel tracks: a stable beta (2.3.x) and an alpha preview (2.4.x). Both tracks are active—the same features land in alpha first, then backport to beta within days. The most significant recent addition is an authenticated knowledge base retrieval API with a built-in provider for remote NocoBase knowledge bases, giving AI employees in workflows access to structured external content for RAG-style lookups. Security improvements are also landing: blocking server-side requests to literal IP addresses and preventing secret env var exposure in custom request URLs.
◆Where it's heading
NocoBase is building out its AI employee and workflow AI layer systematically: context data source settings were simplified in alpha.3, and now the knowledge base retrieval API adds a retrieval-augmented generation primitive that no-code users can wire into workflows without writing code. The WeCom and DingTalk integrations continue to mature, signaling a Chinese enterprise market focus alongside international adoption. Security hardening (XSS prevention, SSRF mitigations) is getting attention across releases, suggesting enterprise deployments with compliance requirements.
◆Prediction
NocoBase will expand the AI knowledge base surface—likely adding vector search providers, fine-grained access control for knowledge bases, and richer AI employee configuration tied to specific knowledge domains. Expect the 2.4.0 release line to formalize AI employees as a stable feature alongside the knowledge base API.

◆Recent moves

  1. 23h ago

    v2.4.0-alpha.6: SSRF protection and secret exposure fix

    v2.4.0-alpha.6 adds SSRF protection (blocking server-side requests to literal IP addresses) and prevents secret environment variable exposure in custom request URLs—both security hardening moves that matter for self-hosted enterprise deployments. iOS QR scanning reliability on v2 forms is also improved.

    View source ↗
  2. 1d ago

    v2.3.0-beta.10

    v2.3.0-beta.10 fixes deep variable nesting in workflow query node conditions (beyond 3 levels) and resolves a workflow list loading issue under MySQL 8.3+. Targeted correctness fixes for workflow edge cases.

    View source ↗
  3. 6d ago

    v2.3.0-beta.9

    v2.3.0-beta.9 backports the SSRF mitigation and iOS QR scanning improvement from the alpha track, alongside WeCom type safety and notification recipient selector unification. Stable-track delivery of improvements already validated in alpha.

    View source ↗
  4. 7d ago

    v2.4.0-alpha.5

    v2.4.0-alpha.5 fixes to-many association field display in v2 forms and corrects the inverse relationship type being editable. Minor form rendering fixes on the alpha track.

    View source ↗
  5. 9d ago

    v2.3.0-beta.8

    ⚡ SPARK

    v2.3.0-beta.8 lands the AI knowledge base retrieval API in the stable track: authenticated retrieval with a built-in provider for remote NocoBase knowledge bases, enabling AI employees in workflows to query structured external content. This is the stable-branch landing of a capability first introduced in alpha.4.

    View source ↗
  6. 9d ago

    v2.4.0-alpha.4

    ⚡ SPARK

    v2.4.0-alpha.4 first introduced the AI knowledge base retrieval API in the alpha track one day before it backported to beta—establishing the pattern of alpha-first, beta-follow for major AI feature delivery. The alpha track continues to preview where NocoBase's AI employee capabilities are heading.

    View source ↗