live wire
▸Red Hat ships important MicroShift 4.16.73 security updateRed Hat Product Errata▸AI · Red Hat maps local AI Inference serving and load tests on RHEL (Oct. 15)Red Hat Emerging Technologies▸PLATFORM · IBM guide maps Secure Execution VMs onto OpenShift Virtualization for LinuxONEIBM Community▸AI · vLLM maps Nemotron 3.5 Super VL across Hopper, Blackwell and Red Hat DSpark (Oct. 15)vLLM Recipes▸AI · AWS contributes push-based KV transfer to vLLM, reporting 3x better TTFT under loadAWS Machine Learning Blog▸AI · AWS contributes bidirectional KV transfer to vLLM, cutting multi-turn TTFT up to 3.3xAWS Machine Learning Blog▸AI · vLLM Semantic Router adds d3-turbo with box and video-tracking decisionsvLLM Semantic Router▸IDENTITY · Keycloak DevDay 2027 opens call for deep technical talks through Oct. 24Keycloak▸AI · vLLM Recipes maps Muse Spark Open to single-node Blackwell and AMD deployment (Oct. 16)vLLM▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸Red Hat ships important MicroShift 4.16.73 security updateRed Hat Product Errata▸AI · Red Hat maps local AI Inference serving and load tests on RHEL (Oct. 15)Red Hat Emerging Technologies▸PLATFORM · IBM guide maps Secure Execution VMs onto OpenShift Virtualization for LinuxONEIBM Community▸AI · vLLM maps Nemotron 3.5 Super VL across Hopper, Blackwell and Red Hat DSpark (Oct. 15)vLLM Recipes▸AI · AWS contributes push-based KV transfer to vLLM, reporting 3x better TTFT under loadAWS Machine Learning Blog▸AI · AWS contributes bidirectional KV transfer to vLLM, cutting multi-turn TTFT up to 3.3xAWS Machine Learning Blog▸AI · vLLM Semantic Router adds d3-turbo with box and video-tracking decisionsvLLM Semantic Router▸IDENTITY · Keycloak DevDay 2027 opens call for deep technical talks through Oct. 24Keycloak▸AI · vLLM Recipes maps Muse Spark Open to single-node Blackwell and AMD deployment (Oct. 16)vLLM▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security
upstreambeat.ai
analysisAI

IBM turns Maximo workflows into approval-gated MCP tools

A tested OpenShift walkthrough shows how Maximo Manage can expose an existing workflow to an AI agent, while surfacing sharp support and response-design caveats.

Maximo workflow tool on OpenShift with approval gate and record lookup.
AI-generated diagram
By The News Desk· Oct 10, 2026the quick take — two AI hosts go live when you do

IBM has documented a concrete pattern for connecting AI agents to governed business processes: publish an active Maximo Manage workflow as a Model Context Protocol tool, then let the agent invoke it on a specific record. The walkthrough was built and tested with Maximo Application Suite 9.2.7, Manage 9.2.4 and AI Service 9.2 on Red Hat OpenShift.

What the pattern does

In the example, an existing work-order review process becomes a tool named wf_test_wf_1. Maximo supplies the tool schema rather than requiring a custom script: every workflow tool accepts an href that identifies the target record. The workflow description becomes the description an MCP client uses when deciding whether the tool fits a request.

The guide shows the full chain from a natural-language request to execution. The agent first finds the work order and obtains its record reference. Because the tool is marked as changing data, the Assistant pauses for approval. After approval, Maximo starts the workflow as the calling user, creates an active workflow instance and places the review task in the user’s inbox.

That is more useful than a generic “agent calls an API” example. It preserves the workflow’s assignments, approval path and record permissions while making the process available through an MCP interface.

The two caveats that matter

The first issue is the response. A workflow tool can return an empty object even when it succeeds. In IBM’s test, the model interpreted that empty response as if no information had been found, although the workflow had started. The guide fixes this by attaching an object structure and query template so the tool returns the updated record. Teams testing similar tools should verify both the back-end state change and the agent’s final message.

The second issue is supportability. On the tested Maximo version, the Assistant filtered out the WFPROCESS tool type by default. The author added it to an agent allow list in a lab, but explicitly says that was not a documented or supported setting and could be overwritten by the operator. The MCP server still exposes the tool to other clients, but production use through the Maximo Assistant requires an IBM-supported enablement path.

What platform teams should take away

The strongest part of the pattern is its separation of responsibilities. Maximo owns the workflow and authorization model; MCP provides discovery and invocation; the agent translates a user request into a record lookup and tool call. Marking the tool as data-changing gives the client enough metadata to insert a human approval step.

Before adopting the pattern, teams should choose workflows whose first action is safe, make descriptions explicit about the resulting change, provide a useful response template, and test duplicate invocation. IBM notes that starting the same process twice on one record fails and that stopping an initiated process must be handled through Workflow Administration.

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.