An LLM agent is a system that puts a language model inside a loop: the model decides what to do, a program executes it, and the result comes back to the model as text. Alammar & Grootendorst (2024) define it as a system that uses a language model to determine which actions to take and in what order, with two new components: tools to do what the model cannot do by itself, and a plan that decides when to use them (2024, p. 218). An LLM is unreliable at multiplying long numbers; with a calculator within reach, the problem changes its nature.
How it works
The canonical pattern is ReAct (reasoning and acting): the model writes a thought (“I
need to search for X”), then an action in a format a program can parse (search[X]), and
receives an observation (the search result), which is appended to its context window
before the next step (Yao et al., 2023). In the original paper there were three actions (look up a
Wikipedia entry, look up a string within it, and finish with an answer), and the core was
PaLM-540B prompted with one to six examples. Consulting Wikipedia reduced
hallucinations compared with pure chain of thought, and in two
interactive environments (ALFWorld and WebShop) ReAct beat imitation and
reinforcement learning methods by 34 and 10 points of success rate
(Yao et al., 2023, secs. 3–4). Alammar & Grootendorst (2024) show the same loop with a LangChain template, a search
engine and a calculator (2024, pp. 219–223).
The other ingredient is tool use. Toolformer learned, in a self-supervised way and from only a handful of demonstrations per tool, when to call a calculator, a question-answering system, search engines, a translator or a calendar (Schick et al., 2023). In June 2023 OpenAI added function calling to its API: the model emits a JSON with the arguments of a function the developer has described, and the program executes it. In November 2024 Anthropic proposed the Model Context Protocol to standardize connections to tools and data, and in 2025 coding agents such as Claude Code or Codex, which read a repository, edit files, run tests and make commits from the terminal, became commonplace.
What changed
Compared with ChatGPT (InstructGPT), the model can be the same: what is new is the scaffold. Compared with Retrieval-augmented generation (RAG), retrieval stops being a fixed step before generation and becomes a tool the model decides whether to use. Millière & Buckner (2024b) describe the result as hybrid neurosymbolic systems that use language or code as a universal interface between connectionist and symbolic components (2024b, sec. 3.1.2). Santelli (2026) puts it this way: when we use ChatGPT or Claude Code we are not interacting with a pure LLM but with a complex neuro-symbolic system, even if the “processor” at its center is grown rather than built.
Limits
Errors compound. AutoGPT, one of the first popular autonomous agents (March 2023, running on GPT-4), tended to get stuck in loops. And since nobody watches the intermediate steps, the design has to provide ways to check them, for instance by asking the agent for the sources of what it found (Alammar & Grootendorst, 2024, p. 223). Any text the agent reads (a web page, an email) may contain instructions: prompt injection is the jailbreak of the agentic era. The base stats of this entry are those of a frontier core; generality measures the whole system.