What is agentic AI?
Agentic AI is an AI system that pursues a goal over multiple steps with limited human supervision, deciding for itself which actions to take along the way. In practice it is a large language model running in a loop: it plans, calls a tool, reads the result, and plans again until the task is done or it needs to ask a human.
The most careful definition comes from OpenAI's Practices for Governing Agentic AI Systems, which treats agenticness as a matter of degree: "the degree to which a system can adaptably achieve complex goals in complex environments with limited direct supervision." It breaks that into goal complexity, environmental complexity, adaptability, and independent execution. A chatbot scores low on all four; a coding agent that fixes a failing test suite on its own scores high.
Anthropic's Building Effective Agents draws the line engineers use day to day. It calls all of these agentic systems, then splits them in two: "Workflows are systems where LLMs and tools are orchestrated through predefined code paths," while agents "are systems where LLMs dynamically direct their own processes and tool usage, maintaining control over how they accomplish tasks." The more decisions the model makes instead of your code, the more agentic the system is.
Agentic AI vs AI agents vs generative AI
The three terms overlap, and most confusion comes from using them interchangeably:
| Term | What it means | Example |
|---|---|---|
| Generative AI | A model that produces content from a prompt in one pass; a human decides what to do with it | Asking a chatbot to draft a SQL query |
| Agentic AI | The property, or the category of systems, that act toward a goal with limited supervision; includes fixed workflows and full agents | A pipeline that drafts the query, runs it, and fixes errors in a loop |
| AI agent | One system where the LLM chooses its own steps and tools at run time | A data agent that decides which tables to inspect, which queries to run, and when it is done |
For the anatomy of a single agent (the model, tools, memory, and loop) see our guide to what AI agents are. For the frameworks that implement the loop, see open-source AI agent frameworks compared, and for the production layer underneath them, agent runtimes explained. The rest of this post looks one level down: what has to be true of the model for any of this to work.

Standalone and Agentic LLMs
A standalone model answers once and stops. An agentic system runs a loop that thinks, decides, acts, observes, and revises. This enables multistep goals, tool use, memory, and collaboration. For methods see ReAct, Reflexion, and Tree of Thoughts.
| Dimension | Standalone LLM | Agentic LLM |
|---|---|---|
| Control loop | Single forward pass from prompt to response | Plan then act then observe then revise |
| Actions and tools | Text only | Structured tool calls, code execution, browsing, and file IO, see Toolformer and Function Calling |
| Memory and state | Context window only | Episodic logs and long term memory with retrieval and reflection, see Generative Agents and MemGPT |
| Planning | Inline next token prediction | Search over thoughts and retrieval augmented planning, see RAP and MCTS AHD |
| Evaluation | Static question answering | Interactive benchmarks for web, operating systems, and software engineering, see SWE bench and WebArena |
A Simple Task, Two Ways
Example query to an LLM: Fix the failing tests in this open source repository, write a minimal patch, and open a pull request with a clear summary.
Standalone model
- Reads the prompt and returns a text suggestion
- Cannot run tests or edit files
- Relies on the user to copy edits and verify the result
Agentic system
- Plans steps and picks tools
- Runs tests, reads error traces, edits files, and reruns tests
- Writes the patch summary and opens the pull request
Memory and State
Agentic LLMs benefit from memory beyond the current context. A useful pattern is a two tier design. Keep a small set of core memories in context and a larger store outside the model. Retrieve by similarity, recency, and importance. See MemGPT and the production framework Letta.
- Episodic memory and reflection. Store observations and actions, then summarize and abstract. See Generative Agents.
- Dynamic organization. Link related memories and let new memories update older ones. See A MEM.
- Practical tips. Separate user profile, project knowledge, and tool history. Age memories that are stale. Log tool inputs and outputs for provenance.
How to Evaluate Agentic LLMs
Prefer execution based tasks over static questions. Measure success, safety, and efficiency.
Benchmarks that matter
- Software engineering. SWE bench Verified shows that careful scaffolds and verification reveal stronger coding ability than earlier setups.
- Web agents. WebArena and VisualWebArena evaluate realistic browsing and visually grounded tasks.
- Computer use. OSWorld runs tasks across desktop systems and reports a large gap between human and agent success.
- Safety. SafeAgentBench and Agent SafetyBench test rejection of hazardous requests and safe planning.
- Browsing. See BrowseComp for a focused measure of web navigation and retrieval.
Tool Calling
When ChatGPT browses the web to answer a question, that is tool calling in action. The model outputs a <tool_calling> marker, or a function call object, the runtime pauses, runs a web search, returns the results into context, and the model continues the answer.
This pattern became popular with Toolformer, which showed how to teach models when to call a tool and how to fill arguments, rather than calling everything all the time.
In agentic systems, tool calls are how LLMs act. The system invokes APIs, runs code, queries a database, or reads and writes files, then observes the outcome and takes the next step. That turns a one shot reply into a simple loop, plan then act then observe then revise.
How to train
Supervised finetuning and RL with human or AI feedback shape both the decision to call and the argument schema. Datasets include structured function calling pairs, for example xlam function calling 60k.
query: Where can I find live giveaways for beta access and games?
answer: [{"name": "live_giveaways_by_type", "arguments": {"type": "beta"}}, {"name": "live_giveaways_by_type", "arguments": {"type": "game"}}]
Tools: [{"name": "live_giveaways_by_type", "description": "Retrieve live giveaways from the GamerPower API based on the specified type.", "parameters": {"type": {"description": "The type of giveaways to retrieve (e.g., game, loot, beta).", "type": "str", "default": "game"}}}]
Practical notes
- Structured outputs via JSON schema reduce parsing errors, see Structured Outputs.
- Parallel tool calls can reduce latency, see Anthropic Tool Use.
- Use sandboxes and least privilege scopes for code and browsers, see Governing Agentic AI.
- Interfaces matter. Agent computer interfaces improve results, see SWE agent.
- Browsing with citation rewards gives cleaner outputs, see WebGPT.
Planning
Another important agentic characteristic is to make goal driven autonomous decisions without the user giving a step by step guide. This is unlocked with chain of thought reasoning. Thinking out loud in a multistep way gives the model context about what to do next, which is exactly what a plan is.
How to train
Reinforcement learning can reward both the outcome and the reasoning process. See Chain of Thought as Policy.

Outcome reward and process reward
Patterns that work in practice
- ReAct interleaves reasoning and actions, see ReAct.
- Reflexion uses self reflection across attempts, see Reflexion.
- Tree of Thoughts branches and self evaluates, see Tree of Thoughts.
- Retrieval augmented planning pulls in prior experience, see RAP.
- Search with MCTS gives stronger global optimization, see MCTS AHD.
Coding Abilities
Most applications today automate software workflows, so coding skill matters. For how labs train models to excel at coding see StarCoder 3. This involves changes at every stage.
Tokenization
Special tokens support code tasks. For example, <|endoftext|> marks the end of a sequence. <|fim_prefix|>, <|fim_middle|>, and <|fim_suffix|> enable Fill in the Middle. <|fim_pad|> is for padding. <|repo_name|> identifies repositories, and <|file_sep|> separates files for repository level learning.
Pretraining
Mix general language data with code specific data. Use public repositories, pull requests, commits, notebooks, and Kaggle sets. Balance code, math, and text for a coding oriented base model.
File level pretraining
Learn from single files.
<|fim_prefix|>{code_pre}<|fim_suffix|>{code_suf}<|fim_middle|>{code_mid}<|endoftext|>
Repository level pretraining
Extend context across many files and learn project structure.
<|repo_name|>{repo_name}
<|file_sep|>{file_path1}
{file_content1}
<|file_sep|>{file_path2}
{file_content2}
<|file_sep|>{file_path3}
<|fim_prefix|>{code_pre}<|fim_suffix|>{code_suf}<|fim_middle|>{code_fim}<|endoftext|>
Instruction finetuning
Stage one uses many diverse but lower quality instructions. Stage two adds filtered high quality data with rejection sampling and supervised finetuning.
RL with execution feedback
For algorithmic tasks, run tests for correctness in Python, Java, and other languages. For complex snippets, use LLM as a judge.
Agentic coding in practice
- SWE bench resolves real issues and requires patches that pass tests, see SWE bench.
- SWE agent gives the model a usable computer interface, see SWE agent.
- Fill in the Middle improves code infilling and editing, see OpenAI FIM.
Safety and Governance
- Use least privilege tools and scopes. Start read only and ask before escalation, see Governing Agentic AI.
- Sandbox code and browsers. Use network allow lists and secrets isolation, see Claude Code Security.
- Add verifiers before actions and auditors after actions. Keep tool logs with provenance. Structured outputs help, see Structured Outputs.
Go deeper on agentic AI with AI
Ask your next question with this article as context. Opens in a new tab; you can edit the question before sending.
Frequently Asked Questions
What is agentic AI?
Agentic AI is an AI system, usually built around a large language model, that pursues a goal over multiple steps with limited human supervision: it plans, calls tools such as APIs, code execution, search, or file access, observes the results, and decides what to do next. OpenAI's governance paper defines agenticness as the degree to which a system can adaptably achieve complex goals in complex environments with limited direct supervision, so it is a matter of degree, not a yes-or-no label.
What is the difference between agentic AI and AI agents?
Agentic AI is the property or the category; an AI agent is one system that has it. In Anthropic's terms, agentic systems include both workflows, where LLMs and tools follow predefined code paths, and agents, where the LLM dynamically directs its own process and tool use. So every AI agent is agentic AI, but an agentic workflow with fixed steps is not an agent in that stricter sense.
What is the difference between agentic AI and generative AI?
Generative AI produces content in response to a prompt: text, code, or images, in one pass, and a human decides what to do with it. Agentic AI uses a generative model as its reasoning engine but adds a loop around it, so the system can act on its output: run the code it wrote, call an API, read the result, and try again until the goal is met.
What makes an LLM agentic?
Three trained capabilities: reliable tool calling (choosing when to call a tool and filling its arguments correctly), multi-step planning and reasoning (chain of thought shaped by reinforcement learning), and strong coding, because code is the most general action an agent can take. Around the model, an agentic system adds a control loop, memory beyond the context window, and permissions and sandboxes that limit what it can do.
What are examples of agentic AI?
Coding agents such as Claude Code, Cursor's agent mode, and OpenAI Codex that run tests, edit files, and open pull requests; deep-research assistants that search, read, and write a cited report; computer-use and browser agents that operate websites and desktop apps; and open-source agent runtimes such as Hermes Agent and OpenClaw that run tasks on a schedule with skills and memory.
When should you use agentic AI instead of a single LLM call?
Only when simpler solutions fall short. Anthropic's guidance is that for many applications, optimizing a single LLM call with retrieval and in-context examples is enough, and that you should add multi-step agentic systems only when they demonstrably improve outcomes. Agents trade latency, cost, and predictability for flexibility, so they fit open-ended tasks where the steps cannot be known in advance.
Conclusion
So in conclusion, for an LLM to be agentic, it needs to be good at coding, and good at knowing when, plan, and how, tool usage, to call code for execution.
