live wire
▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat
upstreambeat.ai
analysisAI

IBM turns Maximo workflows into approval-gated MCP tools

A tested OpenShift walkthrough shows how Maximo Manage can expose an existing workflow to an AI agent, while surfacing sharp support and response-design caveats.

Maximo workflow tool on OpenShift with approval gate and record lookup.
AI-generated diagram
By The News Desk· Oct 10, 2026the quick take — two AI hosts go live when you do

IBM has documented a concrete pattern for connecting AI agents to governed business processes: publish an active Maximo Manage workflow as a Model Context Protocol tool, then let the agent invoke it on a specific record. The walkthrough was built and tested with Maximo Application Suite 9.2.7, Manage 9.2.4 and AI Service 9.2 on Red Hat OpenShift.

What the pattern does

In the example, an existing work-order review process becomes a tool named wf_test_wf_1. Maximo supplies the tool schema rather than requiring a custom script: every workflow tool accepts an href that identifies the target record. The workflow description becomes the description an MCP client uses when deciding whether the tool fits a request.

The guide shows the full chain from a natural-language request to execution. The agent first finds the work order and obtains its record reference. Because the tool is marked as changing data, the Assistant pauses for approval. After approval, Maximo starts the workflow as the calling user, creates an active workflow instance and places the review task in the user’s inbox.

That is more useful than a generic “agent calls an API” example. It preserves the workflow’s assignments, approval path and record permissions while making the process available through an MCP interface.

The two caveats that matter

The first issue is the response. A workflow tool can return an empty object even when it succeeds. In IBM’s test, the model interpreted that empty response as if no information had been found, although the workflow had started. The guide fixes this by attaching an object structure and query template so the tool returns the updated record. Teams testing similar tools should verify both the back-end state change and the agent’s final message.

The second issue is supportability. On the tested Maximo version, the Assistant filtered out the WFPROCESS tool type by default. The author added it to an agent allow list in a lab, but explicitly says that was not a documented or supported setting and could be overwritten by the operator. The MCP server still exposes the tool to other clients, but production use through the Maximo Assistant requires an IBM-supported enablement path.

What platform teams should take away

The strongest part of the pattern is its separation of responsibilities. Maximo owns the workflow and authorization model; MCP provides discovery and invocation; the agent translates a user request into a record lookup and tool call. Marking the tool as data-changing gives the client enough metadata to insert a human approval step.

Before adopting the pattern, teams should choose workflows whose first action is safe, make descriptions explicit about the resulting change, provide a useful response template, and test duplicate invocation. IBM notes that starting the same process twice on one record fails and that stopping an initiated process must be handled through Workflow Administration.

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk