The definition, in one paragraph
An agent is defined by what it is allowed to do, not by how clever it sounds. Give a system a goal, a set of tools it may call, and permission to decide the order in which to use them, and you have an agent. Take away the tools and you have a chatbot. Take away the decision and you have workflow automation. The distinction matters commercially because only one of the three removes work from a person: a chatbot produces text that somebody still has to act on, whereas an agent produces a completed action and a record of it.
The three things an agent has that a chatbot does not
- Tools. Named operations it is permitted to call: read a record, create an invoice, send a message, book a slot, run a query. Each one is an explicit grant, not an emergent ability.
- Memory. A record of what it has already done in this task and, usually, of what happened in previous ones. Without it an agent repeats itself and cannot recover from a partial failure.
- A control loop. It observes the result of each step and decides the next one, rather than following a route drawn in advance. This is the property that lets it handle an input nobody anticipated, and it is also the property that makes it harder to test.
Chatbot, agent and workflow automation compared
The three are frequently sold under the same label. They fail differently, cost differently, and suit different problems.
| Chatbot | AI agent | Workflow automation | |
|---|---|---|---|
| What it produces | Text, in reply to a question | A completed action, plus a record of what it did | A completed action, along one fixed route |
| Who decides the steps | Nobody. There is one step | The system, at run time | A person, at design time |
| Acts inside other systems | No | Yes, through granted tools | Yes, through pre-wired connections |
| Handles an unexpected input | Answers anyway, often wrongly | Usually, or flags it for a person | No. It stops or writes bad data |
| How it typically fails | Confident, plausible, wrong | Takes a reasonable but unwanted action | Breaks loudly at the changed step |
| Ease of testing | High | Low. Behaviour varies between runs | High. The route is fixed |
| Typical build time | Days | Two to eight weeks | Days to two weeks |
| Best suited to | Answering questions from documents | Messy inputs and varying next steps | Identical, structured, repeated tasks |
Five questions that tell you which one you need
Most organisations reach for an agent when a simpler and more reliable option would do. These five questions settle it faster than a proposal does.
Is the input structured every time?
If the work always arrives as the same form, file or field set, workflow automation will be cheaper, faster and more reliable. Reach for an agent when the input is a document, an email or a conversation, where no two arrive in the same shape.
Does the correct next step vary?
If the sequence is identical on every run, encoding it explicitly is better engineering. If the next step depends on what was found in the previous one, that judgement is exactly what an agent supplies.
Does the work require reading and understanding?
Pulling twelve fields off an unfamiliar invoice layout, summarising a call, or deciding whether a complaint is urgent are all tasks where a rule set becomes unmanageable and a model does not.
What is the cost of a wrong action?
A wrongly filed record costs minutes. A wrongly issued refund costs money and trust. The higher that cost, the more of the process should sit behind an approval step, and the less an autonomous agent is the right answer.
Can you describe the process to a new starter in a page?
If you can, you can automate it conventionally. If your answer is that the new starter learns it over three months, you are describing judgement, and judgement is the thing an agent is for.
What this looks like in practice
A concrete case makes the distinction obvious. An invoice arrives by email as a scanned attachment. A chatbot, shown the file, can tell you what the total is. Workflow automation can move the file to a folder and notify the finance inbox, because those steps never change. An agent reads the document, extracts the supplier, dates, line items and totals, checks its own arithmetic against the stated total, looks the supplier up in your ledger, notices that the bank details differ from the ones on file, declines to post the invoice and puts it in a review queue with that discrepancy written at the top.
Only the third of those removes the task. It is also the only one of the three that can take an action you did not want, which is why the useful question about an agent is never how autonomous it is, but where the boundary sits.
What agents still get wrong
A balanced account has to include the failure modes, because they decide how a project should be scoped.
- Behaviour varies between runs. The same input can produce a slightly different path, so testing has to be statistical rather than a single pass. Anything requiring identical output every time should not be an agent.
- Confident errors remain the central risk. A model will produce a plausible supplier name for a smudged field rather than admit it cannot read it, unless it has been explicitly built to flag low confidence and stop.
- Long chains compound. A step that is right 95 per cent of the time is right 77 per cent of the time after five steps, which is why production agents use short chains with checkpoints rather than long autonomous runs.
- Cost scales with volume, not with seats. Every item processed carries a model cost, so a high volume process needs that arithmetic done before the build rather than after the first invoice.
Our own figures, clearly marked
For context rather than as a benchmark: across the agents we build, a first build typically converts around two hours of document keying into about ten minutes of checking, and reduces first response to a new enquiry from roughly four hours to under thirty seconds. Those are typical results for a first build, not measured results for a named client, and they depend heavily on how clean the source data is.
Frequently asked questions
Is every AI agent built on a large language model?
Almost all of the useful ones are, because the model supplies the judgement that decides which step comes next. The model is only one component. An agent also needs tools it is allowed to call, a record of what it has already done, and a boundary that stops it acting outside its remit.
Can an AI agent act without a person approving each step?
It can, and for low risk steps it should, because approval queues remove most of the time saving. Anything irreversible, anything that costs money and anything with legal consequence should keep a human approval step. The usual split is that the agent does the work and a person signs the exceptions.
Do I need an agent, or would ordinary workflow automation do?
If the process is the same every time and the inputs are structured, ordinary workflow automation is cheaper, faster to build and easier to debug. An agent earns its cost when the input is messy, when the correct next step varies, or when the work involves reading documents or holding a conversation.
What happens when an AI agent gets something wrong?
A well built agent is designed to fail into a queue rather than into your data. It flags what it is not confident about, stops, and hands that case to a person with the reasoning attached. Measuring how often that happens is the honest way to judge whether an agent is working.
Are AI agents the same thing as robotic process automation?
No. Robotic process automation replays a recorded sequence of clicks and keystrokes and breaks the moment the screen changes. An agent decides what to do. In practice the two are often combined: the agent decides, and a browser automation layer carries out the step in a system with no other way in.
Related answers
Disclosure, and the only sales pitch on this page
This page is published by a company that sells the thing it describes.
Oxford Crown Technologies builds voice and operations agents for organisations headquartered in London and across the Gulf. We publish these pages as reference material, including market figures that are not ours and that do not always favour us, because a buyer who understands the range negotiates better with everybody, including us. Leadership holding postgraduate degrees from the University of Manchester and the University of Oxford.
Our own builds are fixed fee, live in 14 days, built on accounts in your name, and carry a 28 day money back guarantee. We prove Return on Investment, or you do not pay.
Reviewed 25 July 2026. Market figures change; where this page quotes a range from a third party, the source is named above. Figures described as ours are our published fees or typical results for a first build, not measured results for a named client.