Agents and engineering · October 2026

Chatbot vs AI agent: which one your business needs (and when neither)

Vendors now call almost everything an agent. The difference matters: it changes cost, risk and time to production. Here is how to tell them apart and choose, with concrete support and back-office examples.

~4x an agent's tokens versus a chat, per Anthropic>40% of agentic AI projects canceled by end-2027, Gartner predicts~130 real agentic vendors out of thousands, per Gartner
In short

A chatbot answers questions in a conversation; an AI agent pursues a goal, choosing its own steps and using tools to act in your systems. Choose a chatbot (usually with search over your documents) to answer from known information, a fixed workflow when the steps are known in advance, and an agent only when the path depends on what the system finds, as with refund exceptions. When inputs are structured and rules stable, a form or a classic automation beats both.

The choice drives cost and risk: Anthropic measured that agents use about 4 times more tokens than chat, and Gartner expects over 40% of agentic AI projects to be canceled by the end of 2027. At Slash we build AI agents for companies starting from the simplest option that works.

Chatbot or AI agent: which one do you need?

Start from the job, not the technology. To answer, a chatbot; to complete a task in your systems whose steps change case by case, an agent; if the steps never change, a workflow; if the data arrives structured, perhaps no model at all.

Slash rule of thumb, October 2026. A workflow means model calls chained by your code, as Anthropic defines it.
What you needBest fitExampleWhy
Answer questions about policies, catalog or manualsChatbot with search over your documents (RAG)“What is your return policy?”Bounded answers; nothing changes in your systems
Tell customers where their order isChatbot with one read-only lookup“Where is my order?”One fixed query, no judgment
Approve or refuse refunds under a policy with exceptionsAgent, with a person above a set amountRefund request with partial evidenceOpenAI's own example of judgment-heavy work
Reconcile bank statements with the ERPWorkflow, plus an agent for the exceptionsUnmatched payments with free-text referencesMatching rules are fixed; exceptions need judgment
Collect structured data: address change, appointmentsForm or classic automationA customer updates a billing addressNothing to interpret, so no model needed

What is a chatbot, what is an AI agent and what sits in between?

A chatbot is a conversational interface: it takes a message and returns an answer, today usually generated by a language model from your documents. OpenAI's guide to building agents (April 2025) is explicit: simple chatbots and other applications that don't let the model control how a workflow runs are not agents.

For OpenAI, an agent independently accomplishes tasks on your behalf: the model runs the workflow (it knows when the task is done, corrects itself, hands back control when it fails) and picks tools to gather context and act, within defined guardrails.

Anthropic (December 2024) names the middle ground: in a workflow, the model and tools follow code paths you define; in an agent, the model directs its own process. Its advice is to find the simplest solution and add complexity only when needed, which may mean no agent at all.

In practice

One product can mix all three: a support assistant answers FAQs as a chatbot, runs a fixed workflow for order lookups and calls an agent only for refund exceptions. Decide per task, not per product.

How do chatbots, workflows and agents compare?

The core difference is who decides the next step: nobody beyond the answer (chatbot), your code (workflow) or the model (agent). Integration, risk, cost and time to production all follow from that.

Slash synthesis of Anthropic's and OpenAI's guides. Relative levels, not measurements.
DimensionChatbotWorkflow with AI stepsAI agent
Who decides the next stepNo steps beyond the answerYour codeThe model, within limits you set
IntegrationDocuments, sometimes read-only lookupsThe systems each step touchesTools with read and write rights
Main riskWrong or invented answersErrors at a known stepWrong actions, compounding errors
Cost profileLow, per conversationPredictable: fixed calls per taskVariable: about 4x a chat in tokens (Anthropic)
Time to productionShortest if the content is readyMedium, set by integrationsLongest: tools, evals, guardrails, oversight

Cost deserves a number: in June 2025, Anthropic measured that agents typically use about 4 times more tokens than chat interactions, and multi-agent systems about 15 times more, which pays off only for valuable tasks. We break down the bill in how much an AI agent costs.

How do you spot agent washing?

Ask what the model actually decides. Gartner (June 2025) calls agent washing the rebranding of AI assistants, robotic process automation (RPA) and chatbots as agents without substantial agentic capabilities, and estimates that only about 130 of the thousands of agentic AI vendors are real.

The same release predicts that over 40% of agentic AI projects will be canceled by the end of 2027 (escalating costs, unclear business value or inadequate risk controls) and notes that many use cases sold as agentic don't need an agentic implementation. Five questions for any vendor:

  • Which decisions does the model make at run time, and which are scripted?
  • Which tools can it call, with which credentials, and what can each one change?
  • When does it hand over to a person?
  • What are its pass rate and cost per resolved task on your cases, in your language?
  • Are its actions logged where the agent cannot edit them?

A scripted flow behind a chat window is often the right product. The problem is paying agent prices, and taking agent risks, for it.

When is an agent worth it? Four concrete cases

When the path depends on what the system finds and each task is worth the extra tokens and controls. OpenAI's guide gives three signals: decisions full of exceptions, rules too costly to maintain and heavy reliance on unstructured data; otherwise, a deterministic solution may suffice.

  • FAQ support. Policies, hours, products: a chatbot with search over your documents. Tools would add risk, not value.
  • Order status. One lookup, one answer, the same steps every time: a chatbot with a read-only query, or a fixed workflow.
  • Refunds. Policy, history, evidence and exceptions are weighed case by case: here an agent earns its place. OpenAI cites refund approval as complex decision-making and lists large refunds among actions that need human oversight. Typical design: the agent gathers facts and proposes; a person approves above a set amount.
  • Back-office reconciliation. Matching bank lines to ERP invoices follows rules, so a workflow does most of it; for the leftovers (partial payments, free-text references), an agent can propose matches for a person to confirm.

Anthropic sees customer support as a natural fit for agents: a chat interface plus tools to read customer records and orders, actions such as refunds and success measured in resolutions. Without actions to take, an agent is an expensive chatbot.

When is a form or a plain workflow better than both?

When the input is structured, the rules are stable and errors are expensive. Changing a billing address, booking an appointment or approving an expense under a fixed limit needs validation, not language understanding: a form, an API call or a classic automation is faster, cheaper and easier to audit.

  • Structured inputs: if data arrives in fields, a model only adds cost and variance.
  • Hard rules: rates, limits and eligibility belong in code, where they can be tested.
  • Low volume: a task done a few times a month rarely repays design, evaluation and monitoring.

Models still help at the edges: routing incoming emails to the right form, or extracting fields from a PDF before a rule-based process. More in what to automate first with AI.

Rule of thumb

If the process fits on a one-page flowchart with no “it depends” box, you probably don't need an agent.

What risks does each option carry, and how do you control them?

A chatbot mostly risks bad answers; an agent, bad actions. So controls sit on the text for a chatbot and on tools and permissions for an agent.

Risks from the OWASP Top 10 for LLM Applications 2026 and the sources cited; controls recommended by Slash.
RiskChatbotAI agentControl
Wrong or invented answerDamages trustAlso feeds wrong actionsSearch with citations, evals on real cases
Prompt injection (LLM01)Leaked system prompt, improper answersHidden instructions trigger actionsTreat everything it reads as untrusted; least privilege
Excessive agency (LLM03)Rare without toolsThe main riskFew tools, scoped credentials, confirmation of irreversible steps
Compounding errorsLimited to one answerCarried from step to stepCaps on steps and spend, checks between stages
Personal dataConversation logsLogs plus whatever the tools reachLaw 1581 or GDPR, retention rules

Simon Willison's “lethal trifecta” sums up the agent case: private data, untrusted content and a way to send data out, combined in one agent, let an attacker steal data through what it reads. Remove one leg before launch; the full rules are in AI agents in production.

Europe: since August 2, 2026, Article 50(1) of the AI Act requires providers to make sure people know they are talking to an AI system, unless it is obvious. Colombia: Law 1581 of 2012 governs the personal data a chatbot or agent processes, including data sent to models hosted abroad. And Gartner expects rules guaranteeing access to a human to raise assisted service volume by 30% by 2028: design the handoff from day one.

How do you start without overbuilding?

  1. Pick one task with an owner and a metric: resolution rate, handling time or error rate.
  2. Build the simplest version that could work: one model call with search over your documents, then a workflow.
  3. Write 20 to 50 test cases from real conversations, in your customers' languages; Anthropic suggests that size for a first evaluation set.
  4. Connect tools read-only first, then add write actions one at a time, with confirmation and logging.
  5. Define when a person takes over: after how many failures, and for which actions.
  6. Measure cost per resolved task on real traffic before widening the scope.

An assistant inside your own product is a sound first step. In the app we built for Réseau Mazette, a network of French-speaking professionals and entrepreneurs in Spain, Mia, the AI copilot, has its own tab next to the directory and events, where members open the chat to ask their questions (see the case). For assistants on your website or WhatsApp, see our AI chatbots for business.

Key takeaways

  • A chatbot answers; an agent chooses its steps and acts through tools; a workflow runs steps your code defines.
  • Decide per task: FAQs and order status rarely need an agent; refund exceptions and messy reconciliations can.
  • Agents use about 4 times the tokens of a chat, per Anthropic: the task has to be worth it.
  • Gartner estimates only about 130 of thousands of agentic vendors are real: ask what the model actually decides.
  • Start with the simplest option, test on 20 to 50 real cases and give agents least privilege and a human handoff.

Sources

  1. Building effective agents · Anthropic, 2024-12-19
  2. A practical guide to building agents · OpenAI, 2025-04
  3. How we built our multi-agent research system · Anthropic, 2025-06-13
  4. Gartner predicts over 40% of agentic AI projects will be canceled by end of 2027 · Gartner, 2025-06-25
  5. Gartner predicts GenAI cost per resolution for customer service will exceed offshore human agent costs by 2030 · Gartner, 2026-01-26
  6. AI Act, Article 50: transparency obligations for providers and deployers of certain AI systems · AI Act Service Desk, European Commission, 2026-10-08
  7. Ley Estatutaria 1581 de 2012 · Función Pública (Colombia), 2012
  8. OWASP GenAI LLM Top 10 2026 · OWASP GenAI Security Project, 2026-08-03
  9. Demystifying evals for AI agents · Anthropic, 2026-01-09
  10. The lethal trifecta for AI agents: private data, untrusted content, and external communication · Simon Willison, 2025-06-16

Editorial note: this analysis reflects the public information available on the review date. Models, prices and rules change fast; every third-party figure links to its source, and our opinions are labeled as such. Spotted an error? Write to contact@slash-digital.io.

Frequently asked questions

The questions we hear often

What is the difference between a chatbot and an AI agent?

A chatbot answers messages in a conversation. An AI agent pursues a goal: the model chooses the next step and calls tools to read data and act in your systems until the task is done or it hands over to a person.

Is an AI agent better than a chatbot?

Not by default. An agent costs more per task (about 4 times the tokens of a chat, according to Anthropic), takes longer to reach production and can take wrong actions. It is better only when the task needs judgment across several steps and its value pays for that cost.

Can a chatbot become an agent later?

Yes, and it is often the best path: start by answering questions, add read-only lookups, then add write actions one at a time, with confirmation and logs. The conversation layer stays; the tools and controls grow.

What is agent washing?

Gartner's term for rebranding assistants, RPA or chatbots as agents without substantial agentic capabilities. Gartner estimates that only about 130 of the thousands of agentic AI vendors are real.

Do customers have to be told they are talking to an AI?

In the European Union, yes: since August 2, 2026, Article 50(1) of the AI Act requires that people know they are interacting with an AI system, unless it is obvious. Colombia has no AI law yet, but Law 1581 of 2012 governs the personal data the assistant processes.

Talk to Slash

Let's put it in production

Tell us your challenge. We reply within 24 business hours with an honest first read: if we can help, we'll say how; if not, we'll say who can.

I reply personally. No endless forms, no canned replies.

Message Esteban