Red Hat on Tuesday opened its Ansible Automation Platform to AI agents while adding new controls intended to keep them under tight governance. The company made its Model Context Protocol (MCP) server for Ansible generally available, allowing any AI tool to access the platform, and introduced a new automation orchestrator, in technology preview, that routes actions through human-approved, deterministic playbooks.
The goal is to allow enterprises to start using AI to automate their workflows while maintaining a firm hand on what the AI agents can and cannot do. This addresses recent concerns about AI agents performing unauthorized actions in production environments. By relying on pre-made, tested, and approved playbooks, Red Hat ensures that automations are repeatable, deterministic, and auditable. The AI will suggest playbooks based on natural language requests, but any novel actions require human verification.
With the general availability of the MCP server, external AI agents—such as those from OpenAI, Google, Anthropic, or any provider supporting the OpenAI API—can now connect to Ansible. This broadens the platform's accessibility and allows enterprises to integrate their preferred AI assistants. Additionally, Red Hat now supports retrieval-augmented generation (RAG) embeddings, enabling customers to inject their own contextual knowledge, such as corporate policies or maintenance schedules, into the AI process. This contextual grounding helps the AI generate more relevant and compliant automation suggestions.
The new automation orchestrator, which is in technology preview, acts as a middleware layer that intercepts AI-generated requests and maps them to existing, deterministic playbooks. If no appropriate playbook exists, the orchestrator flags the request for human approval before execution. This design minimizes the risk of AI hallucinations causing production disruptions. As Sathish Balakrishnan, vice president and general manager of Ansible at Red Hat, explained, AI is unpredictable, and putting it directly into production environments without guardrails could lead to catastrophic failures, such as accidental database deletion.
By funneling AI actions through playbooks, enterprises also reduce operational costs. Calling large language models for every automation step is expensive in terms of token usage. For routine tasks like patching servers, deterministic playbooks are far more efficient and reliable. This practical approach ensures that AI is used where it adds real value—such as troubleshooting, compliance remediation, and developer self-service—rather than for mundane operations.
Industry analysts have noted both the promise and risks of this approach. Paul Nashawaty of Efficiently Connected emphasized that connecting AI agents to highly privileged automation systems can be dangerous if not properly controlled. He recommended restricting AI to non-production environments initially and enforcing strict role-based access control. Jevin Jensen from IDC highlighted that natural-language interfaces for platforms like Ansible have been long awaited, and the key is to have robust governance in place. He advised starting with less impactful areas, such as development environments, before expanding to production.
The new capabilities also include enhancements for end-user delegation and event-driven automation. Administrators can now allow non-IT users, such as factory floor managers, to trigger automations at optimal times based on their operational knowledge. Furthermore, multiple events can now trigger the same playbook, reducing duplication and simplifying management. These features, combined with the AI integration, make Ansible more flexible and accessible across the enterprise.
Red Hat has also expanded model support beyond IBM's WatsonX Code Assistant to include Google, Anthropic, OpenAI, and other compatible models. Enterprises can provide their own background information through RAG embeddings, enabling the AI to understand specific policies and rules. This customization helps tailor automation recommendations to each organization's unique environment.
As enterprises increasingly adopt AI agents for IT operations, the balance between innovation and control becomes critical. Red Hat's approach with Ansible provides a sandboxed pathway for AI-driven automation, ensuring that every action is traceable, reversible, and aligned with business policies. The technology preview of the orchestrator will gather customer feedback to refine the system before general availability.
In summary, Red Hat's announcement marks a significant step in integrating AI with enterprise automation platforms. By combining MCP server access with strict guardrails and deterministic playbooks, the company enables safe, cost-effective, and scalable AI-assisted automation. Enterprises can now leverage the power of large language models without sacrificing operational stability or security.
Source: Network World News