{"slug": "red-hat-joins-race-to-be-air-traffic-controller-for-ai-agents", "title": "Red Hat joins race to be ‘air traffic controller’ for AI agents", "summary": "Red Hat made its agentic AI management tools for OpenShift 5 generally available at KubeCon in Salt Lake City, including an MCP server and an MCP gateway, with MCP support for RHEL and Developer Hub to follow. The OpenShift 5 gateway sits between AI agents and the tools they call, filtering what each agent can see based on its credentials and incorporating Nvidia's open source NeMo Guardrails to block prompt injections and protect sensitive data. Dell'Oro Group analyst Mauricio Sanchez said the market for a central agent control plane remains open: \"The race hasn't been won. It's the first inning of the race.", "body_md": "The big Red Hat news at this week’s [KubeCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/) conference in Salt Lake City is the general availability of its agentic AI management tools for OpenShift 5, including an MCP server and an MCP gateway, with MCP support for RHEL and Developer Hub coming soon.\n\nManaging AI agents is a top concern for enterprises today as AI models get smarter and more capable. Without adequate controls, they can cause significant harm. Plus, every major enterprise platform provider is deploying agentic capabilities. Companies can build agents with AWS, Azure, and Google Cloud, with Salesforce, SAP, and Databricks, with OpenAI and Anthropic, among dozens of other platforms. Many companies are using multiple agent builders, meaning that coordinating them all is now becoming a significant challenge.\n\nDeciding on a central control plane is one of the biggest decisions companies can make today, and, now, Red Hat is on the path to becoming one of the options, thanks to its MCP support, guardrails, and other agent management features.\n\n“Everyone wants to be the air traffic controller for AI agents,” says [Mauricio Sanchez](https://www.delloro.com/about/team/mauricio-sanchez/), an analyst at the Dell’Oro Group. “They all want to be that secure infrastructure software layer that will help enterprises as they deploy agents, do so securely.”\n\nThe advantage to using Red Hat is that it runs across cloud and on-premises, and works with AI systems from different hyperscalers, AI companies, and enterprise software providers, helping enterprises avoid vendor lock-in. However, its capabilities lag behind some of the other players, experts say, and there are limits about how much oversight it can offer into agents hosted on other platforms.\n\n“An enterprise that has a significant amount of investment in server and software infrastructure should definitely shortlist someone like Red Hat,” Sanchez says. “Those enterprises that will continue to host their own server, storage, and compute infrastructure will need software to run that, and the Anthropics and the hyperscalers aren’t going to help them do that in the agentic AI era.”\n\nAs to whether Red Hat can take on more of the agentic AI management—that’s still an open question because the field is evolving so quickly. “The race hasn’t been won,” Sanchez says. “It’s the first inning of the race, and it will be fascinating to see where the industry goes.”\n\nThe opportunity is there because agentic AI systems are typically built in a world where everything is API driven. AI agents in particular connect to data, tools, and other systems via MCP— Model Context Protocol—servers, among other open standards.\n\n“There are still pockets where you can’t do everything through an API,” Sanchez says. “But if there’s one thing that the AI community has embraced is that everything has to be API driven, and if there are pieces that can’t be controlled, it’s really a question of when those APIs are going to be added.”\n\nBut Red Hat has a lot of competition.\n\nMicrosoft, for example, is very strong in this space with Azure Agent 365, says [Donovan Brady](https://www.linkedin.com/in/the-donovan-brady/), vice president of developer relations at Leapwork, a software testing company. “It has agent support for basically any agent wherever you deploy it,” he says. “Red Hat definitely does not have that same single control plane.”\n\nIn this week’s [OpenShift 5 announcement](https://www.redhat.com/en/about/press-releases/red-hat-openshift-5-transforms-hybrid-cloud-operations-real-time-intelligence-and-zero-trust-security), Red Hat said that an MCP gateway now sits between AI agents and the tools they call, filtering what each agent can see based on its credentials. It also includes the NeMo Guardrails, an open source toolkit from Nvidia that can block prompt injections and protect sensitive data. The gateway also lets companies require human approval for any agent actions that change systems.\n\nIn addition, the new MCP server for OpenShift ties agent access to existing identity systems and Kubernetes role-based permissions, with audit trails for agent activity. There is also an agent sandbox in technology preview, which can isolate untrusted agent code in virtual machines.\n\n“Nobody is going to hand an autonomous agent the keys to production on day one. Red Hat seems to understand that,” says [Matt Kimball](https://moorinsightsstrategy.com/team/matt-kimball/), an analyst at Moor Insights & Strategy. “Its agentic story isn’t about agents acting on their own. It’s about giving them governed access, keeping a human in the loop on remediation, and being able to see what an agent did and what it cost.”\n\nRed Hat also announced that we’ll be seeing an [MCP server for RHEL](https://www.redhat.com/en/about/press-releases/red-hat-strengthens-hybrid-cloud-foundations-against-ai-driven-threats-latest-versions-red-hat-enterprise-linux) in the coming weeks. The goal is to give enterprises a way to use AI agents to diagnose RHEL issues without giving them unrestricted access.\n\nThere’s also an MCP server coming in [Red Hat Developer Hub 2.1](https://www.redhat.com/en/about/press-releases/red-hat-advances-red-hat-developer-hub-agent-ready-enterprise-developer-portal), expected to be generally available later this month. This is an enterprise developer portal built on top of the open-source Backstage project, and gives developers, AI development tools, and AI agents access to enterprise context—including a company’s software catalog, live operational data, documentation, and self-service workflows.\n\n“Red Hat Developer Hub 2.1 provides a governed foundation for connecting developers and AI agents with that context, helping organizations accelerate software development without sacrificing security, consistency or control,” says [Balaji Sivasubramanian](https://www.linkedin.com/in/balajisiva/), Red Hat’s head of product for developer tools.\n\nWith MCP, AI agents can access enterprise systems and take actions such as triggering a golden path or debugging a Kubernetes deployment issue, Red Hat says.\n\n“MCP is table stakes for any modern platform,” says IDC analyst [Jim Mercer](https://my.idc.com/getdoc.jsp?containerId=PRF005085).\n\nThe significance of the Red Hat announcements, he says, is that the MCP support extends agentic capabilities beyond OpenShift itself. “It seems like Red Hat is positioning OpenShift 5 as an agentic operations platform, not just an infrastructure platform,” he says.\n\nThis is the first major release in about seven years, he adds, and the announcements are important for Red Hat customers. OpenShift 4 came out in 2019. With this new release, Mercer says, “OpenShift is competing not only in Kubernetes and hybrid cloud infrastructure, but increasingly in virtualization, AI infrastructure, agentic operations, and enterprise security.”\n\nIn other AI news, Red Hat promoted OpenShift LightSpeed from a conversational assistant chatbot to a full-fledged AI agent that can diagnose cluster problems, propose fixes, and assess the risk of updates. Plus, in a technology preview, it’s also able to take on more troubleshooting tasks, with a human still in the loop to approve every change.\n\nBut AI wasn’t the only thing on the menu this week. Red Hat OpenShift 5 also adds hardened multi-tenancy for sovereign deployments and expands support for post-quantum cryptography.\n\nRed Hat is also offering a free year of OpenShift Virtualization for qualifying three-year agreements, a move that could be designed to attract VMware customers looking to leave that platform without having to pay double during the transition period.\n\nOpenShift Virtualization is “technically viable” as a VMware alternative for on-prem deployments, says Leapwork’s Brady. “But it’s a very different platform and you would need to completely rearchitect the way your data center is built and operated,” he says. “You’re talking about a significant amount of time and effort and money. It might not be worth it.”\n\n[Dimitris Mavrakis](https://www.abiresearch.com/staff/analysts/dimitris-mavrakis), senior research director at ABI Research, agrees that switching a virtualization technology stack is a significant effort. “We don’t believe the one-year free license argument to be the strongest catalyst for migrating,” he says.", "url": "https://wpnews.pro/news/red-hat-joins-race-to-be-air-traffic-controller-for-ai-agents", "canonical_source": "https://www.networkworld.com/article/4247825/red-hat-joins-race-to-be-air-traffic-controller-for-ai-agents.html", "published_at": "2026-11-12 12:14:30+00:00", "updated_at": "2026-11-12 12:19:42.824339+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-safety", "ai-products", "artificial-intelligence"], "entities": ["Red Hat", "OpenShift 5", "Model Context Protocol", "Nvidia", "NeMo Guardrails", "Mauricio Sanchez", "Dell'Oro Group", "KubeCon"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/red-hat-joins-race-to-be-air-traffic-controller-for-ai-agents", "markdown": "https://wpnews.pro/news/red-hat-joins-race-to-be-air-traffic-controller-for-ai-agents.md", "text": "https://wpnews.pro/news/red-hat-joins-race-to-be-air-traffic-controller-for-ai-agents.txt", "jsonld": "https://wpnews.pro/news/red-hat-joins-race-to-be-air-traffic-controller-for-ai-agents.jsonld"}}