How to test an AI agent before it talks to your customers
Most AI agents that disappoint were tried, not tested: someone asked ten questions, liked the answers and switched it on. In our calls of the past two weeks one worry kept coming back: what if it sounds like a robot, or says something we would never say? Here is how we answer it before launch: a test set made from your real conversations, what each case checks, and when the agent is ready.
Trying it is not testing it
Trying an agent means asking it a few questions and judging the answers by feel. Testing means writing down, before you look, what a good answer is for each case, and checking the agent against that list after every change. It matters for three reasons.
- Customers are wary of bots. In a Gartner survey of 5,728 customers, 64% said they would prefer companies did not use AI in customer service; their top concern was that reaching a person would get harder (Gartner, survey of December 2023, published 9 July 2024).
- What the agent says, your company says. In February 2024 a Canadian tribunal ordered Air Canada to pay a passenger 650.88 Canadian dollars in damages after the chatbot on its website suggested a bereavement fare could be claimed retroactively, which the airline did not allow. The airline was “responsible for all the information on its website”, the tribunal found, chatbot included (Moffatt v. Air Canada, 2024 BCCRT 149).
- The same question does not always get the same answer. Anthropic’s engineers run each test several times because model outputs vary between runs (Anthropic, January 2026).
Start from 20 to 50 real conversations
You do not need hundreds of cases. Anthropic’s engineering guide to testing agents says 20 to 50 simple tasks drawn from real failures is a great start. We work the same way: about 20 real conversations to learn how your team writes, turned into around 50 cases, and more whenever a situation is not covered. Pick them from your WhatsApp, inbox or call notes:
- The questions that repeat. Opening hours, documents, published prices, where an order stands.
- The ones that went wrong. A customer who misunderstood, a document that had to be asked for three times.
- The ones a person had to decide. An exception, a discount, a technical call.
- The awkward ones. An angry customer, a photo nobody can read, a voice note, a question in another language, a request for something you do not offer.
Take out names, phone numbers and anything personal first. You need the situation, not the person.
What happened, in your customers’ own words.
What a good answer must do, and must never do.
Write the good answer down first
For each case, write three things before you see the agent’s reply: what the customer writes, what a good answer must do, and what it must never do. Judge the outcome, not the wording: Anthropic’s guide advises grading what the agent produced, not the path it took. There are many good ways to ask for a clearer photo; there is one outcome you want.
It helps to sort every case into one of three zones:
- It answers. Facts from your sources it can give with certainty: hours, requirements, documents.
- It informs, but does not decide. It explains how something usually works and says clearly that a person confirms it.
- It hands over. Prices outside your rules, technical verdicts, complaints: it passes the conversation to a person, with the history.
| The customer writes | A good answer | Never |
|---|---|---|
| “Can you have it done by Friday?” | Gives the date only if your calendar shows it; otherwise says what it depends on and passes the question to a person. | Promises a date nobody has confirmed. |
| A blurry photo of a document | Says what it cannot read and asks for it again, with a tip on how to take it. | Accepts it and moves on. |
| “This is ridiculous, I want to talk to someone.” | Acknowledges it in one line, hands over at once and says when someone will reply. | Argues, or keeps the customer going round in circles. |
| “Am I talking to a person?” | Says plainly that it is an AI agent and offers a person. | Dodges the question or claims to be human. |
What every case should check
- Facts only from your sources. If the answer is not in your information, it says so and hands over. It never fills the gap.
- The right request. It asks for the document or photo the procedure needs, one at a time, and asks again when one cannot be read.
- Its zone. It answers, informs or hands over, as the case says.
- That it is an AI. Since 2 August 2026, the EU AI Act requires providers to design systems that talk to people so that people are told they are dealing with an AI, unless it is obvious (Article 50).
- A way to a person. WhatsApp’s Business Messaging Policy, updated on 23 September 2026, allows automated replies in the 24-hour window but requires “prompt, clear, and direct escalation paths”, such as a transfer to a human agent in the chat (WhatsApp).
- Your voice. Short sentences, the customer’s language, no filler. Most bots that sound robotic are polite in a way nobody on your team is: judge tone against two or three real replies from your team.
Run it, read it, fix it
- Run every case several times
A case passes only if it passes every time. Anthropic’s guide calls this pass^k: the chance that all of k tries succeed. For a customer, one good answer in three is a failure.
- Read the conversations
Scores tell you what failed; the conversations tell you why. Anthropic’s guide closes its conclusion with the same advice: read the transcripts.
- Fix the instructions, not the test
Change the agent’s instructions or its information, then run the whole set again, not just the case that failed.
- Decide with your team
Ready when every “never” passes every time, the rest pass at the rate you agreed, and someone on your team would sign a sample of the answers.
Most failures trace back to a rule that is missing, vague or contradicted. We explain how to keep them clean in how to write instructions for AI agents.
Keep testing once it is live
- Every hand-over and every complaint becomes a case. Anthropic’s guide recommends turning the failures users report into test cases. Old cases should keep passing, close to 100%: Anthropic calls these regression evals.
- Run the whole set after every change, including a new model. Models change often: Anthropic released Claude Haiku 5.5 on 7 October 2026, and its release notes warn that code written for the previous Haiku can break on it (Anthropic). Before you switch, run the set.
- Read a sample every week. Anthropic suggests sampling transcripts to read weekly, and since 14 October 2026 its platform can send traces of API requests and Managed Agents sessions to a company’s own monitoring tools (OpenTelemetry export, in beta). Whatever you use, keep a record of what the agent did, and look at it.
If you keep one thing: before switching anything on, write down 20 to 50 of your real conversations and what a good answer looks like for each. That list, not a demo, tells you whether the agent is ready.
How we do it
Every agent we build is tested with the client’s real questions and goes live when it passes. If you already run your own agent, built with ChatGPT, Claude, n8n or anything else, we can build that test set with you, fix what fails and leave you the tests: that is our AI agent setup help.
Questions about testing AI agents
Can I test an agent without a developer?
How do I stop it sounding robotic?
Does the agent have to say it is an AI?
Sources, checked on 16 October 2026: Anthropic, Demystifying evals for AI agents (9 January 2026) and Claude Platform release notes (7 and 14 October 2026); Gartner, survey of customers on AI in customer service (9 July 2024); British Columbia Civil Resolution Tribunal, Moffatt v. Air Canada, 2024 BCCRT 149 (14 February 2024); Regulation (EU) 2024/1689 on artificial intelligence, Article 50; WhatsApp, WhatsApp Business Messaging Policy (updated 23 September 2026).