Maat

About

Maat is an open-source MCP server and toolkit that lets AI agents diagnose Ubuntu machines without being able to change them. The read-only tools run inside a strictly confined snap with no network access, and proposed fixes become typed plans that a person approves through polkit. Because the kernel enforces these limits rather than the prompt, a hijacked model cannot act on its own. It also keeps a tamper-evident audit trail and includes maat-bench, a benchmark of deliberately broken machines.