Explainer
What Is an AI Agent? A Plain-English Guide
Best AI Tools Editorial·Updated November 7, 2026·5 min read
Explainer
What Is an AI Agent? A Plain-English Guide
The short answer
An AI agent is software that uses a language model to pursue a goal over several steps, choosing actions, using tools such as a browser, terminal or API, and reacting to the results with limited human input. A chatbot answers; an agent acts. Agents work best on bounded tasks like coding and research, and still need oversight for anything irreversible.
What is an AI agent?
An AI agent is a program built on a large language model (LLM) that works toward a goal over multiple steps. Instead of producing a single reply, it plans, takes an action, observes the result, and decides what to do next — repeating until the task is done. The LLM is the “brain”; tools like a web browser, a terminal, or an API are its “hands”.
Anthropic draws a useful line here. It calls systems where code steers the model through predefined steps “workflows”, and reserves “agents” for systems where the model directs its own process and tool use. Its advice is to start with the simplest solution that works and reach for an agent only when you cannot predict how many steps a task will take.
How is an agent different from a chatbot?
A chatbot responds. An agent acts. Ask a chatbot to “book a meeting” and it explains how; ask an agent and it can check a calendar, find a slot, and send the invite. The dividing line is autonomy and tool use: agents make decisions and take real actions on your behalf.
| Chatbot | AI agent | |
|---|---|---|
| Output | An answer | A completed task |
| Steps | Usually one | Many, in a loop |
| Tools | Rarely | Browser, code, APIs, files |
| Human input | Every turn | Mostly at start and review |
How do AI agents work?
- 01You give a goal (e.g. “fix this failing test”).
- 02The agent plans the steps needed to reach it.
- 03It uses tools — reading files, running code, searching the web.
- 04It observes each result and adjusts its plan.
- 05It repeats until the goal is met, then reports back.
Agents reach their tools through integrations, and the Model Context Protocol (MCP) has become a common one: an open-source standard that lets assistants such as Claude and ChatGPT, and editors such as VS Code and Cursor, connect to data sources, tools and workflows.
Where do agents actually work today?
Agents are most reliable on bounded tasks with a clear definition of done, and coding is the clearest win. Claude Code runs your tests and keeps working when something fails, uses Git and can open pull requests, asking permission before it changes files or runs commands. Codex runs tasks from the ChatGPT apps, a CLI, an IDE extension or the cloud. GitHub Copilot’s coding agent, on its $10 Pro plan, turns an assigned task into a pull request. Outside code, browser agents such as Perplexity Comet research questions, draft email replies and can even buy products for you.
| Agent | Where it runs | Best for |
|---|---|---|
| Claude Code | Terminal, IDEs, desktop and web | Repo-wide coding tasks |
| Codex | ChatGPT apps, CLI, IDE extension, cloud | Coding inside the ChatGPT ecosystem |
| GitHub Copilot coding agent | GitHub, from Copilot Pro | Turning assigned tasks into pull requests |
| Devin | Devin Desktop and Devin Cloud | Long sessions that keep running in the cloud |
| Perplexity Comet | Browser on desktop and mobile | Web research and errands |
Reality check
Agents still make mistakes and can confidently go down wrong paths, and agents that read the web are exposed to prompt injection — instructions hidden in a page that the agent follows. OpenAI has said that problem is unlikely ever to be fully solved, and a 2026 University of Washington study found that four of seven agentic browsers created ways around a basic browser security protection. Keep a human in the loop for anything irreversible — payments, production deploys or external messages.
How to keep an agent on a short leash
- —Test it in a sandbox first, with guardrails, because errors compound over many steps.
- —Set stopping conditions, such as a maximum number of iterations.
- —Add checkpoints where the agent pauses for your review, or stops when it hits a blocker.
- —Give it the narrowest permissions that do the job, and keep it away from email, banking and admin accounts.
How to try one
The easiest place to experience a useful agent is coding, where the agent has a clear sandbox and an obvious success signal. Codex is included in limited form even on ChatGPT’s free plan, Copilot’s free plan includes agent mode, and Claude Code comes with Claude Pro at $20. General assistants such as ChatGPT and Claude also offer agentic, tool-using modes you can experiment with.
Sources
- 01Anthropic: Building effective agents
- 02Model Context Protocol: What is MCP?
- 03Anthropic: Claude Code
- 04OpenAI: ChatGPT Work and Codex pricing
- 05GitHub: Copilot plans
- 06Cognition: Devin Desktop
- 07Perplexity: Comet
- 08TechCrunch: OpenAI says AI browsers may always be vulnerable to prompt injection
- 09University of Washington: Some agentic AI browsers come with major cybersecurity risks
Update log
- November 7, 2026Added sources and concrete examples: Anthropic’s workflow-versus-agent distinction, MCP, current coding and browser agents and where they run, prompt-injection risk from OpenAI and the University of Washington, and practical guardrails. Removed the year from the title.
- June 10, 2026First published.
Spotted an error? Email us. Fixes are listed on our corrections page.
Frequently asked
- What is an AI agent in simple terms?
- It’s software that uses an AI model to complete a goal by taking multiple steps on its own — planning, using tools like a browser or code editor, and acting on the results — instead of just answering a question.
- What is the difference between an AI agent and ChatGPT?
- ChatGPT is primarily a chatbot that responds to prompts, though it includes agentic tools such as Codex. A pure AI agent goes further: it takes a goal and autonomously performs a sequence of actions to achieve it, with limited human input.
- Are AI agents safe to use?
- They’re reasonable for bounded, low-stakes tasks but still make mistakes, and agents that read the web can be manipulated by prompt injection. Keep a human in the loop for anything high-stakes or irreversible, and give agents limited, well-scoped permissions rather than broad access.
- What are the best AI agent tools to try?
- Coding agents are the most practical starting point because the task is bounded and success is measurable: Codex (included on every ChatGPT plan), Claude Code (from Claude Pro) and the agent mode in GitHub Copilot’s free plan. Cursor also builds an agent into its editor.