Show HN: Maat – AI agents that can diagnose Ubuntu but can't change it

Category: infrastructure

Tags: mcp, sandboxing, ubuntu, snap, ai-agents, audit-trail

Score: 7.5/10 (Innovation: 8, Technical: 8, Documentation: 8, Utility: 6)

Maat is an MCP server and toolkit that lets AI agents diagnose Ubuntu systems from inside a strictly confined snap with read-only, network-less permissions, then propose typed fix plans that a human approves via polkit. It stands out for pushing security enforcement down to the kernel (AppArmor/seccomp) rather than relying on prompt instructions, and for shipping a tamper-evident audit trail plus an open benchmark of broken Ubuntu machines.

Target audience: devops and SREs managing Ubuntu systems

Repository: https://github.com/bolesawny7/maat · Go · GPL-3.0 · 1 stars

View on Hacker News