What AI agents can do for a business today, and what they cannot
Agents now answer mail and calls, key orders, chase invoices and prepare reports. They still fail about one task in three on hard benchmarks, which decides where they should start.

Contents
The word "agent" now covers everything from a chatbot with a new name to software that changes records on its own. Gartner estimates that only about 130 of the thousands of vendors selling agentic AI offer real agents1. A useful definition is narrower: an agent is given tools and decides which to use. n8n's documentation puts it plainly: connect a chat model and one or more tools, and the agent decides which tools to call2.
The jobs agents already do
The platforms reviewed on this site document the same families of work.
- Answering and routing. Customer email and chat, inbound calls and messages. Lindy works across email, Slack, text and phone3; Copilot Studio agents work by chat or voice and publish to Teams and websites4.
- Keying and updating records. Turning emailed, faxed or voicemail orders into orders for a person to confirm, as OpenLazarus describes for its order-desk teammate5.
- Chasing. Overdue invoices, late deliveries and unanswered quotes. OpenLazarus's agent library includes billing, purchasing and collections roles6.
- Prospecting and scheduling. Relevance AI's examples include research, outbound prospecting, meeting scheduling and deal review7.
- Reporting. Weekly numbers and summaries, drawn from the systems the agent can read.
Adoption follows the same shape. In McKinsey's 2025 survey, 62% of organisations were at least experimenting with agents and 23% were scaling them, usually in one or two functions, most often IT and knowledge management8.
What the evidence shows
Published results come almost entirely from vendors and concentrate on high-volume work: pipeline generated by sales agents at Qualified9, conversion at Zembl10, security operations at Vodafone11. They show where agents are used, not how often they go wrong.
Independent evidence on reliability is sobering. Stanford's 2026 AI Index reports that agents reached about 66% task success on OSWorld, a benchmark of real computer tasks, and still fail roughly one attempt in three on structured benchmarks12. In McKinsey's survey, only 39% of organisations saw any effect on enterprise-wide earnings8.
What agents cannot yet be trusted to do alone
A one-in-three failure rate on hard tasks is acceptable for drafting a reply that a person checks. It is not acceptable for issuing a refund, changing a promised delivery date or paying a supplier. OWASP's guidance on excessive agency recommends human approval for high-impact actions, along with least privilege13. In practice, that divides an agent's work in two:
| Agent works alone | Agent prepares, a person approves |
|---|---|
| Reading and searching records | Changing prices, credits or refunds |
| Drafting replies and summaries | Sending messages outside the company |
| Logging calls and notes | Placing orders above a set value |
| Routing and tagging | Changing promised dates or terms |
The platforms implement the right-hand column differently: per tool connection (Relevance AI), per tool call (n8n), per integration (Lindy), as a workflow node (Dify) or as limits per AI teammate (OpenLazarus)1415161718.
How to choose a first agent
- List the work that arrives by email and phone and ends in a record. That is usually where the volume is.
- Count it. Pick the task with the clearest weekly number.
- Sort its actions into the two columns above.
- Run it with approval on every write for the first weeks, then relax rules for actions that have proved reliable.
- Review the log weekly and compare the count with the baseline.
The end state is modest and measurable: one task handled every day, a person approving the actions that matter, and a weekly number that shows whether the agent is earning its cost. Our guide to permissions and approvals covers the second step in detail.
Questions buyers ask
What is an AI agent, as opposed to a chatbot?
A chatbot answers. An agent can also act, by calling tools such as sending an email, updating a record or booking a meeting, and can decide which tool to use. n8n's documentation describes it simply as connecting a chat model to tools and letting the agent decide which to call.
Which tasks should a company give an AI agent first?
High-volume, repetitive work with a clear measure and a reversible outcome, such as answering routine customer email, keying orders from email, chasing overdue invoices or preparing weekly reports. Keep actions that are costly to undo behind an approval step.
Can AI agents answer the phone?
Some can. Lindy works across text and phone calls, Copilot Studio supports voice agents, and OpenLazarus gives each AI teammate its own phone number. Check how calls are logged and what the agent may do during a call.
Sources
- Over 40% of agentic AI projects will be scrapped by 2027, Gartner says (Reuters). Reuters via The Star, 25 Jun 2025. Accessed 8 Nov 2026.
- AI Agent node. n8n Docs. Accessed 8 Nov 2026.
- Lindy: hire an AI employee that gets work done. Lindy. Accessed 8 Nov 2026.
- Microsoft Copilot Studio: create AI agents. Microsoft. Accessed 8 Nov 2026.
- AI for wholesale and distribution: orders, stock, suppliers. OpenLazarus. Accessed 8 Nov 2026.
- The agent library: ready-made AI teammates. OpenLazarus. Accessed 8 Nov 2026.
- The home of the AI Workforce. Relevance AI. Accessed 8 Nov 2026.
- McKinsey report shows AI interest but slow scaling. IT Brief UK, 11 Nov 2025. Accessed 8 Nov 2026.
- How Qualified scaled with 35+ AI agents. Relevance AI, 1 May 2025. Accessed 8 Nov 2026.
- Zembl built a 24/7 AI sales workforce. Relevance AI, 1 Mar 2026. Accessed 8 Nov 2026.
- Leveraging automation in cybersecurity: Vodafone. n8n. Accessed 8 Nov 2026.
- The 2026 AI Index Report. Stanford HAI. Accessed 8 Nov 2026.
- LLM06:2025 Excessive Agency. OWASP Gen AI Security Project. Accessed 8 Nov 2026.
- Approvals and escalations. Relevance AI Docs. Accessed 8 Nov 2026.
- Human-in-the-loop for tools. n8n Docs. Accessed 8 Nov 2026.
- Integrations. Lindy Docs. Accessed 8 Nov 2026.
- Human Input node. Dify Docs. Accessed 8 Nov 2026.
- Questions about OpenLazarus (FAQ). OpenLazarus. Accessed 8 Nov 2026.
Updated 8 Nov 2026: First published.