AI Agents in Your EHR vs Point Tools vs Custom Builds
The agent platform wave is reaching small practices second-hand
Epic expanded its AI ambitions with an agent platform, Cosmos-powered predictions, and deeper workflow automation, according to Fierce Healthcare’s coverage published in August 2026. If you’re on Epic, this is already your roadmap. If you’re on athenahealth, eClinicalWorks, Dentrix, Open Dental, or SimplePractice, it’s a preview of your next renewal conversation — big-system announcements tend to set the template smaller vendors follow, whether or not the features are ready when they ship.
Meanwhile the point-solution market keeps carving out single jobs. Vendors are shipping narrow agents aimed at one workflow each — inbound call handling, specialty referral conversion, denial triage — and going deep on that one thing rather than broad across the practice.
So you have three homes for an agent. Choosing between them is now a normal operations decision, like choosing a clearinghouse.
What “agent” actually means here
An AI agent is a large language model — Claude, GPT-class models, or similar — wrapped with tools, permissions, and instructions so it can carry out a multi-step task and take actions, not just answer questions. To be concrete: ChatGPT and Claude are general-purpose models; an agent is that model plus the ability to read and write in your systems, plus a loop that lets it keep working until the task is done or it gets stuck.
Two supporting pieces matter for the comparison:
- MCP (Model Context Protocol) is an open standard for giving an AI assistant governed access to a specific system’s data and actions. It’s the plumbing that lets an assistant read your schedule or write a note into a task queue without someone pasting screenshots.
- Skills are reusable, packaged instructions that teach the assistant to do one job the same way every time — your prior-auth packet standard, your denial triage rules, your recall script.
An agent without tool access is a chatbot. An agent with tool access and no logging is a liability.
The question isn’t whether the agent is smart enough. It’s whether it can see enough of your systems to finish the job — and whether you can prove afterward what it did.
The three options, honestly
Strengths: already inside the record, covered by your existing BAA, no new integration project, no new vendor security review. Writes back natively. Usually the fastest path to “live.”
Weaknesses: you get the roadmap the vendor gives you. Scope stops at the EHR boundary — it usually can’t touch your imaging software, your merchant processor, your fax inbox, or the spreadsheet your biller actually runs on. Configuration depth varies wildly. Pricing is often per-provider and bundled, so you can’t drop it if one module disappoints.
Strengths: spans systems. You define the skill, the escalation rules, and the audit trail. You can start with read-only access and add write permissions job by job. Not locked to one vendor’s release schedule.
Weaknesses: it’s a build. Someone owns it — updates, breakage when an API changes, access reviews, a BAA with whoever hosts the model. If your EHR has no usable API, the build gets expensive or impossible. Overkill for a job one vendor already does well.
The third option — the point solution — sits between them. A vendor who has done inbound-call intake or referral conversion for a thousand clinics will beat your first custom attempt at that specific job. The trade is another integration, another BAA, another login, and a growing pile of narrow tools that don’t talk to each other. Three point solutions is a stack. Seven is a problem.
Sorting your jobs into the right bucket
A rough decision rule — judgment, not benchmark data:
-
Does the whole job live inside one system?
Charting, in-basket message drafting, coding suggestions, chart summarization. If the data and the action both live in the EHR, start with the EHR-native agent. Anything else adds cost for no gain. Use our checklist for evaluating your EHR vendor’s AI agents before you sign.
-
Is it a narrow, high-volume job with mature vendors?
Inbound call answering, appointment reminders, ambient scribing, statement follow-up. Buy. These markets are competitive and you will not out-build them on your budget.
-
Does the job cross systems your vendors don't connect?
Prior-auth packet assembly pulling from the chart, the fax archive, and a payer portal. Denial triage that reconciles the clearinghouse report against the PM ledger and the scanned EOB. Cross-system reporting for the owner. This is the custom MCP territory — see the Claude-plus-EHR build guide for what that actually involves.
-
Is it high-volume, rule-shaped, and unambiguous?
Then don’t use an LLM at all. Eligibility batch checks, recall lists, reminder cadences — a rule-based automation or an existing PM feature is cheaper, faster, and easier to audit. AI earns its keep on messy, judgment-shaped work.
Model the money before you shop
Don’t accept a vendor’s savings claim. Build the estimate yourself. Here’s the shape of the math with placeholder inputs — every number below is an assumption you replace with your own measurement, not a benchmark:
The piece practices consistently under-count is that last deduction: someone has to own the agent. Reviewing escalations, updating the skill when a payer changes a form, re-checking access scopes. Budget real hours for it, or the automation quietly rots. And recovered hours only become money if they get reallocated to revenue work — collections follow-up, recall outreach, filling the schedule — rather than absorbed.
Count the avoided costs honestly and without inventing figures: a claim scrubbed before submission is a denial you don’t work twice; a referral packet assembled correctly the first time is a week of back-and-forth you don’t have. You know your own rework volume. Use that.
Where every version of this breaks
Agents fail in predictable places, regardless of which home you pick. They fail on ambiguous patient intent (“I need to move my thing”). They fail when a payer portal changes its layout. They fail silently when an integration token expires and nothing writes back. And they confidently produce plausible wrong answers when the source data is incomplete — which is exactly when a human should be in the loop.
Design the handoff before you design the automation: what triggers escalation, to whom, with what context attached. Our guide on when a front-office agent should escalate to a human covers the specific triggers worth hard-coding.
As of 2026, the honest summary is that agentic tooling is genuinely more capable than the chatbot wave of two years ago, and genuinely less finished than the demos suggest. Skepticism is warranted; paralysis isn’t. Pick one workflow, keep a human on the escalation path, and confirm any step touching PHI or clinical judgment with your privacy officer and clinical leadership before it runs unattended.
Not sure where to start?
Get a free automation audit: we map your scheduling, intake, insurance, billing, and patient communication and show you what's worth automating — before you spend a dollar.
Get a free automation audit