Use AI by Zapier for AI steps inside a Zap. Use Zapier MCP when Claude or ChatGPT needs to call app actions. Zapier is moving Agents into AI by Zapier. After migration, all three use the same task pool.
When you need this
- Teams built standalone Zapier Agents and need to plan the move into AI by Zapier.
- People want their assistant to update the CRM or post in Slack.
- A workflow needs judgment at one step, such as triage or summarizing.
Evaluation criteria
AI inside a Zap
Is the AI one bounded step in a fixed flow?
Look forDefine typed output fields in the AI by Zapier step and map them to later steps. Zapier's Remote case study uses ChatGPT to set ticket priority and category. Fixed steps file tickets in Notion and Zapier Tables.
Agentic steps
Does the step need to choose tools at run time?
Look forUse Advanced or Premium for tools and knowledge sources. Turn on Require approval before running for tools that change data. The setting defaults to off.
Agents migration
Which agents depend on features AI by Zapier lacks today?
Look forCheck feature support before migration. Zapier has set no date to turn Agents off and says it will email affected users with notice first. AI by Zapier does not support the HubSpot, Asana, Zendesk, Zoom, and Jira knowledge sources yet, and Zapier plans them for Q4 2026. Admin-level bring-your-own-model is still to come, and each user can connect their own API key today. Each migrated agent becomes a trigger and one AI step.
Assistants through MCP
Which assistants should reach which apps?
Look forCreate one Zapier MCP server per client. Use dynamic tool discovery or a fixed list to restrict access. Sharing requires Team or Enterprise. Test the code tool too. One builder's read-only calendar server wrote an event through that tool.
Injection and approvals
What stops an email or a web page from steering an agent?
Look forRequire approval for sensitive tools and screen for prompt injection with AI Guardrails. In 2025, Repello AI made a Gmail auto-reply agent without approvals forward earlier emails to an attacker.
Admin controls for AI
Can admins switch agentic behavior and models off?
Look forUse the Admin Center to control tool calling and block models. Require approval before publishing Zaps with AI steps.
Questions to ask vendors
- Which of our agents use knowledge sources AI by Zapier does not support yet?
- Which tools should require approval before an AI step uses them?
- Which assistants are connected to Zapier MCP today, and who connected them?
- Do we want Next Gen Zaps, built from an MCP client and in early access on paid plans?
Red flags
- An email-triggered agent that can send email with no approval step.
- Turning on migrated Zaps without turning off the original agents, which can run actions twice.
- Assistants connected with broad tool access when a fixed tool list would do.
- Raising an AI step's task limit to 500 without reviewing why it hits 75.
Products in this piece
Sources
- Official documentation
- 12
- Public source
- 5
- Zapier Help: AI by Zapier model tier pricing
- Zapier Help: Add tools to your AI by Zapier step
- Zapier Help: Migrating from Agents to AI by Zapier
- Zapier Help: Best practices for migrating from Agents to AI by Zapier
- Zapier Help: How is Zapier Agents usage measured?
- Zapier MCP docs: Overview
- Zapier Help: What is Zapier MCP?
- Zapier MCP docs: Usage and billing
- Zapier MCP docs: Supported clients
- Zapier Help: AI Guardrails by Zapier
- Zapier Help: Get started with Next Gen Zaps
- Zapier case study: How Remote saves US$500K annually and automates 11M tasks (Apr 25, 2025)
- Repello AI: Exploiting Zapier's Gmail auto-reply agent for data exfiltration (Jul 24, 2025)
- Gareth Brown: OpenClaw with Hetzner, Tailscale, Discord and Zapier MCP (Feb 24, 2026)
- Reddit r/zapier: I added MCP server with read rights, my AI agent was still able to write (Jun 10, 2026)
- Reddit r/zapier: Agent Changes (Aug 15, 2025)
- Zapier Community: Zapier says I'm over my 100-task limit after using 25 task (Sep 26, 2026)