Agents are the most oversold category in AI right now, so it is worth being blunt about where they hold up.
They work well when the task is bounded, the information needed is available in systems you control, and a wrong answer is recoverable. Answering "where is my order and can I change the delivery address" is a good agent job: the data is there, the actions are reversible, and the volume justifies the build.
They work badly when the task requires judgement your policies do not encode, when a wrong action cannot be undone, or when the agent would need broad write access across systems to be useful. We will not build an agent with unrestricted access to your production database, and you should be wary of anyone who offers to.
The practical middle ground is an agent that does the gathering and drafting, then presents a recommended action for a person to approve with one click. That pattern captures most of the time saving with a fraction of the risk, and it is what we build most often.