AI agent vs chatbot: the difference, in plain language
Aug 5, 2026
By Helgar Palmieri · Co-founder, Technology & delivery
The short answer
A chatbot answers; an agent acts. Under the hood there are really three tiers of technology hiding behind the word "chatbot." Scripted bots follow a fixed decision tree — menus and buttons, "press 2 for opening hours" in text form. LLM-driven chatbots hold a real conversation and answer questions from your business's information. AI agents do all of that and then take action in your systems: register the order, book the table, update the CRM, hand the conversation to a person when needed. The distinction matters because it determines which problems each one can actually solve — and what safeguards each one needs before you put it in front of customers.
Scripted bots: fast, cheap, rigid
A scripted bot is a flowchart with a chat interface. Every path was written by a person in advance: if the customer taps "delivery," show these three options; if they tap "hours," show the schedule. It never misunderstands, because it never understands anything — it matches buttons to branches.
That rigidity is the feature and the flaw. Setup is quick and cheap, behavior is perfectly predictable, and nothing off-script can ever happen. But the moment a customer writes an actual sentence — "do you have a table for six on Saturday around eight?" — the script has no branch for it, and the customer gets the dreaded "I didn't understand, please choose an option." Most people abandon right there.
LLM chatbots: real conversation, grounded in your information
The second tier uses a large language model — the technology behind tools like ChatGPT and Claude — to understand free text and respond naturally. Done properly, the model doesn't answer from its general knowledge; it answers from yours: your price list, your policies, your schedules, loaded as a knowledge base the bot must stick to. Ask in any phrasing and it finds the answer; ask something outside its knowledge and a well-built one says so instead of improvising.
That last clause is the entire game. An LLM chatbot without grounding will confidently invent prices and policies — the failure everyone has read about. Grounding it in your documents, and instructing it to escalate what it doesn't know, is what separates a useful assistant from a liability.
AI agents: conversation plus action
The third tier is where the economics change. An agent doesn't just tell the customer a table is probably available — it checks the reservation system, books the table, and confirms. It doesn't just explain your menu — it takes the order and records it. Connected to your systems through controlled integrations, it reads real data and writes real records: orders, reservations, CRM entries, support tickets.
This is the tier where our WhatsApp AI Assistant for restaurants and hotels lives: it converses genuinely — no button menus, voice notes included — consults the actual menu or service list, builds the order or books the reservation against real data, and flags the conversation for a human the moment one is needed. The difference customers feel is simple: the conversation ends with something done, not with a link to go do it themselves.
Side by side
| Scripted bot | LLM chatbot | AI agent | |
|---|---|---|---|
| Understands free text | No — buttons and keywords only | Yes | Yes |
| Answers from your data | Only what was pre-written | Yes, from a knowledge base | Yes, including live data |
| Takes action in systems | No | No — answers only | Yes: orders, bookings, records |
| Best at | Tiny, fixed set of questions | Support and FAQs at volume | Transactions end to end |
| Main risk | Frustrated customers who abandon | Wrong answers if poorly grounded | Wrong actions if poorly scoped |
Where each one fits
- Scripted bot: you get the same five questions all day, nothing else, and budget is minimal. Legitimate — just know its ceiling.
- LLM chatbot: customers or employees ask varied questions against a stable body of information — policies, catalogs, procedures — and the answer is the product. Nothing needs to be executed.
- AI agent: the conversation should end in a transaction — an order, a booking, an updated record — or the query requires looking things up in live systems. This is where the return usually is, because it replaces work, not just typing.
Risks, and why a human stays in the loop
Each tier fails differently, so each needs different guardrails. A scripted bot's risk is commercial: frustrated customers who leave. An LLM chatbot's risk is a wrong answer, controlled by grounding it in your information and having it escalate what it doesn't know. An agent's risk is a wrong action — which is why a responsible build gives it narrow, explicit permissions (it can create a reservation; it cannot issue a refund), logs every action it takes, and keeps a human handoff one step away at all times.
Human-in-the-loop isn't a limitation to apologize for; it's the design. The agent absorbs the volume — routine orders, bookings, questions at 11pm — and detects when a conversation deserves a person: a complaint, an edge case, a customer who simply asks. Our AI and automation practice ships every build with usage, cost, and error-rate metrics, because an automation you can't measure is one you can't trust.
Frequently asked questions
Is a scripted bot ever the right choice?
Yes. If the queries are genuinely few and fixed — opening hours, location, a tracking link — a scripted flow is cheap, instantly predictable, and impossible to derail. The mistake isn't using one; it's expecting it to handle real conversation, or bolting twenty branches onto it until nobody can maintain the flowchart.
Will an AI agent replace my support or sales team?
No, and builds that promise so should worry you. What an agent does is absorb repetitive volume — the standard orders, the availability questions, the after-hours messages that used to go unanswered — so your people handle the conversations that need judgment. Teams usually end up doing higher-value work, not disappearing.
How do we keep an agent from making things up or doing something it shouldn't?
Three mechanisms, all standard practice: ground it so answers come only from your information and unknowns get escalated; scope its permissions so it can execute only the specific, low-risk actions you defined; and log everything so every answer and action can be audited. Add a clean handoff to a human, and you have an agent you can actually leave in front of customers.