Chatbot vs Agent

Now that you've seen the model, the tools, and the loop, the most marketed word in AI right now - agent - turns out to be a small, clear idea. The whole difference between a chatbot and an agent lives in how many times that loop runs and what the tools are allowed to touch.

A chatbot talks; an agent acts

A chatbot is the loop running once or twice. You ask, it answers. You might go back and forth for ten messages, but each turn is the same shape: you send text, it sends text back. Nothing happens in the world. It can write a beautiful email - but you still copy it, paste it, and hit send. It produces words. The doing is on you.

An agent is the loop running many times on its own, with tools that reach outside the conversation. You give it a goal, and it works toward that goal across several steps - using a tool, reading the result, deciding the next step, using another tool - until it decides the job is done. It produces outcomes, not merely words. The email gets sent. The meeting gets booked. The spreadsheet gets updated.

Here's the same task, both ways:

Notice the model is identical in both columns. The difference is entirely the tools it can reach and how many rounds the loop is allowed to run.

What this looks like in real products

You already use both, often in the same app.

Chatbot-shaped: asking a model to summarize a document you pasted, brainstorm names, rewrite a paragraph, explain a concept. It reads, it responds, the loop stops. The output is text for you to judge and use.

Agent-shaped: a coding assistant that reads your files, edits several of them, runs the tests, sees a failure, fixes it, and runs the tests again - all from one instruction. A research tool that searches the web, opens a dozen pages, and assembles a report with sources. A support bot that looks up your order, issues the refund, and emails you confirmation. In each case it's taking real steps in the world and reacting to what it finds, not handing you a draft.

The tell is this: did it only tell you something, or did it change something? Telling is a chatbot. Changing is an agent.

Why the line matters: trust and risk scale with reach

This isn't trivia. The chatbot/agent line is where the risk lives, and it's worth being deliberate about.

A chatbot's worst case is a wrong answer. It tells you something false, you read it, maybe you catch it, maybe you don't - but nothing has happened yet. There's a human (you) between its output and any real consequence. That gap is a safety net.

An agent removes the net. When it acts on its own, its mistakes become real before you can review them. A confidently wrong chatbot drafts a bad email. A confidently wrong agent sends it. The same flaw - and these tools do get things wrong, every model does - costs more when there's no human in the loop to catch it first.

So the practical questions to ask of any agent, before you let it run:

• What can it actually touch? Read-only (search, look things up) is low-risk. Write access (send, delete, pay, post) is where you slow down.
• What's the worst it can do in one run? Reorder a list of suggestions, fine. Email your whole client list, not without a check.
• Where's the human? Good agent setups ask for confirmation before the costly, hard-to-undo steps - spending money, sending to lots of people, deleting things. "Want me to send this?" is a feature, not friction.

flowchart LR
  A[Read-only<br/>search, lookup] --> B[Reversible writes<br/>draft, edit a doc]
  B --> C[Costly / irreversible<br/>send, pay, delete]
  A:::low
  C:::high
  classDef low fill:#1b3a2b,stroke:#3a7a55,color:#cfe8d8
  classDef high fill:#3a1b1b,stroke:#7a3a3a,color:#e8cfcf

A good rule while you're learning a new agent: let it loose on the read-only, reversible stuff first. Watch how it behaves. Only hand it the keys to the irreversible actions once you trust its judgment - and even then, keep a confirmation step on the things you can't take back.

The headline: a chatbot saves you typing. An agent saves you steps. The second is more useful and more dangerous, for exactly the same reason - it acts without waiting for you. Which brings us to the thing you most need to keep in mind before you trust either one: what they're genuinely bad at.