Share a link, write together.
A Markdown-first collaborative knowledge base — real-time, and open to people who don't have an account.
Send someone a share link and they can edit with you immediately — no account, no invitation, no billing seat. A guest holds a short-lived token bound to exactly one page or space; revoking it is a single operation, and the link can carry an expiry and a password.
Everything is written on one live-preview surface over a single CRDT document. Diagrams, tables and callouts render where you type them while the source underneath stays plain Markdown, so what you export is what you wrote. Vim users get a real vim mode on that same surface — a keymap toggle, not a separate editor.
- Anonymous real-time co-editing through share links — time-limited, password-protectable, revocable in one operation.
- One Markdown surface. Live preview and source are the same editor; no block format to convert into and out of.
- Real vim mode — a keymap toggle, with ex commands and blockwise visual selection.
- Rich blocks that stay Markdown: Mermaid, Excalidraw, PlantUML (rendered by a service you run, off by default), KaTeX math, tables, callouts, columns, tabs, details, task lists, page transclusion and embeds.
- Permissions with real depth — space-to-page inheritance, per-page overrides, groups and roles, backed by OpenFGA.
- Search that can't leak — hits are filtered by what the viewer may see and confirmed again before they are shown.
- History — revisions, diffs and restore.
- Publishing — pages and spaces can be made public, off by default for the whole tenant.
- Comments, mentions, watches and notifications.
- Nothing is trapped inside — export a page as Markdown or HTML, or a whole space as an archive you can import back.
- An API and an MCP endpoint — scoped API keys, and assistants that read and write pages under the same permission checks a person gets.
- Multi-tenant — one deployment serves many tenants, isolated at the database.
- English and Japanese.
git clone https://github.com/wikistead/wikistead.git && cd wikistead
cp .env.example .env # two secrets are mandatory; the server won't boot without them
cp apps/web/.env.example apps/web/.env.local
pnpm install
pnpm dev:up # middleware + first-run bootstrap (safe to re-run)
docker compose --profile apps up -d --build # web, server, collab and the reverse proxyThen open https://dev.localhost and sign in. The proxy serves everything on one origin, which is
what the product assumes — the SPA calls a relative /api, so a stack without it answers its own
page to every API call. The certificate is Caddy's internal one, so the browser warns until you run
caddy trust; SITE_HOST=app.example.com docker compose --profile apps up -d uses a real ACME
certificate instead.
Nobody can sign in yet: make the first administrator with
pnpm --filter @wikistead/server tenant:local-admin dev you@example.com --create, which prints an invite link.
docs/self-hosting.md is the full guide: the secrets to generate, single-host Docker Compose and what production needs beyond it, reverse-proxy and TLS rules, the configuration reference, and how to create the first tenant and get into it.
TypeScript throughout — Fastify on the server, React and CodeMirror 6 on the web, Yjs and Hocuspocus for realtime. Postgres holds the documents, OpenFGA answers every permission question, Meilisearch serves search, Valkey carries realtime fan-out, and attachments go to any S3-compatible store (SeaweedFS by default, swappable for R2 or S3). Design decisions are recorded as ADR-nnn records cited throughout the code comments.
Wikistead has a Code of Conduct. Security issues must go through the private channel described in SECURITY.md — never a public issue.
Bug reports and feature ideas are very welcome as issues. External pull requests are not accepted at this time; CONTRIBUTING.md explains why, and how to build and run the project from source.
The Community Edition — this repository — is AGPL-3.0. Enterprise features are proprietary and live outside this source. Every bundled dependency is permissive (MIT / Apache-2.0 / BSD / ISC), so nothing copyleft is linked into a distributable; CI enforces that on every change.
Copyright (C) 2026 4nm1tsu.