teaflask

Embedded AI assistants for SaaS: what they are and how to choose one

What an embedded AI assistant is, how copilot-as-a-service differs from a toolkit, the five product types sold under the name, and eight questions to choose by.

An embedded AI assistant is an AI agent that lives inside your product's own interface and can answer questions about the product and take actions in it for the signed-in user.

Copilot-as-a-service means buying that assistant (the UI, the runtime, the permissions and the knowledge) rather than assembling it yourself.

Five different kinds of product get sold under this name, and they are not substitutes for each other.

What is an embedded AI assistant?

An embedded AI assistant is an AI agent that runs inside a software product's own screens, knows how that product works, and can act for the signed-in user. The test of one is whether a user can say what they want done and watch it happen in the product they already have open.

The pattern it replaces is the help widget in the corner. Ask a billing tool how to issue a partial refund and you get a tidy list of seven steps, which you then perform yourself, in order, by hand. An assistant that can act reads the page, fills in the form, calls your API as the user, and stops for a yes before anything risky.

The cost it removes has a name. We call it the interface tax: the distance between deciding and done, paid in clicks. This guide skips the case for paying less of it and goes straight to the buying decision, which is where the vocabulary gets slippery.

What is copilot-as-a-service?

Copilot-as-a-service means buying the assistant as a managed product instead of building it from parts. The vendor supplies the chat interface, the agent runtime, the permission controls and the knowledge layer; you supply your product, your API and the decisions about what the assistant may do.

The label is a category nickname with no standard behind it. Nobody certifies what is inside, and vendors apply it to anything from a React chat component to a managed agent platform. That looseness is the reason this guide exists. Treat the phrase as a question to put to a vendor: which of the layers below do I still own?

How an embedded assistant works inside a SaaS product

Every embedded assistant, whatever it is sold as, is five layers stacked in the same order.

  1. UI surface

    Where the conversation appears: a corner widget, a sidebar, a command palette, a full page, or an interface you build yourself on a headless API.

  2. Runtime

    Runs the agent loop. It calls the model, runs tools, streams the reply, pauses for approvals and keeps the conversation state.

  3. Knowledge

    What the agent knows about your product: docs, the page in front of the user, live data from your API. This is the layer that goes stale.

  4. Actions

    The operations it can perform: API calls, form fills, navigation. Each one has a schema that limits what the model can ask for.

  5. Identity and permissions

    Who the assistant acts as, what it may attempt, and who has to say yes first.

Read in order, it doubles as a build list, because every product on the market covers one stretch of it and leaves you the rest. Component kits usually cover the first layer. Toolkits reach into the second. Support agents cover knowledge and a few actions, inside a channel they own. No demo lingers on the last layer, identity and permissions, and that is where most of the real risk lives.

That layer deserves a name, because the rest of this guide leans on it. Call it the keys question: when the assistant acts, whose keys is it holding? A service account with broad access, a token your backend mints, or the signed-in user's own session. The answer decides how much of your authorization logic the assistant can route around by accident.

The five kinds of product sold as embedded AI assistants

The five kinds are UI component kits, agent toolkits, hosted bot builders with web widgets, support agents and full-stack embedded agents. These are tendencies, and individual products cross the lines. The useful column is the third one: what you still build.

Five kinds of embedded AI assistant product, compared by what you get, what you still build, and best fit
KindWhat you getWhat you still buildBest fit
UI component kitsChat components, streaming, thread and message state, often open source.The agent, the knowledge, the actions, identity and permissions, and usually where conversations are stored.You already run an agent backend and need a good interface on top of it.
Agent toolkitsA framework for model calls, tools and streaming, sometimes with a protocol or UI hooks between agent and frontend.The product-specific agent, approvals, durable execution unless a companion service covers it, and the interface polish.Your team wants to own the agent and treat the vendor as plumbing.
Hosted bot builders with web widgetsA visual or low-code builder, a hosted runtime, knowledge ingestion and an embeddable chat widget.Deep actions inside your signed-in app, and anything the builder's flow model does not express.Support or CX teams that want to configure an agent without much engineering.
Support agentsAn agent trained on your help content, wired to a helpdesk, with human handoff.Operating your product's own screens as the user, beyond the integrations the vendor offers.Cutting the volume of tickets from customers who write in.
Full-stack embedded agentsUI surfaces, runtime, knowledge drafted from your code, actions and permissions in one managed product.The adapter between the assistant and your API, and the decisions about which actions to grant.Product teams that want the assistant to operate the product without staffing an agent platform.

A team with an agent backend and a design system should read the first row as the right answer. A team that has neither should notice how much of the third column is the unglamorous part: identity, approvals and state that survives a restart.

How to choose: eight questions to ask every vendor

Ask every candidate eight questions: can it act, whose identity it acts as, who approves risky actions, whether a conversation survives a closed tab or a deploy, how knowledge stays current, whether you can switch models, who pays for inference, and what UI ships. Put them to every candidate, including us. Questions two and three are the ones whose wrong answers you tend to find out about in production, so weight them accordingly.

Can it act, or only answer?

Answering is the easy half. Ask the vendor to issue a partial refund while the user watches, and ask what happens when the call fails halfway through. A bot that returns numbered steps still leaves the work with the user.

Whose identity does an action run as?

There are three answers: a shared service account, a token your backend issues, or the signed-in user's own session. A shared service account can have broader permissions than the person asking, so ask whether each request is also authorized for that user. Ask where credentials live and which system enforces authorization.

Who approves risky actions?

"Human in the loop" can mean a prompt the model chooses to show or a gate the runtime enforces. Prefer the gate: the policy should apply per action, before a request leaves the runtime, with no way for the model to talk around it.

Does a conversation survive a closed tab or a deploy?

Agent turns can run for minutes and pause for hours. If state lives in the browser or in one server process, a reload or a release loses the work, or repeats an action. Ask where state is recorded and whether any action can be sent twice.

How does knowledge stay current when code ships?

Docs go stale as code ships, and the assistant answers from them with full confidence. Ask what triggers a refresh, whether changes are applied automatically or proposed for review, and which kinds of claim can be checked at all.

Can you switch models or fall back between them?

Providers throttle and go down. Ask whether routing is an ordered list, whether fallback works in the middle of a response, and whether your users can pick a model.

Who pays for inference?

Model cost scales with usage, which means it scales with your most engaged customers. The options are vendor-bundled pricing, your own provider key, a prepaid balance, or the end user's own subscription. Ask which ones exist and where the margin sits.

What UI ships?

A usable assistant needs more than a text box: conversation history, a way to see what the agent did, and a place to live in your layout. Check which surfaces come built and whether you can replace the interface entirely.

Judge each candidate by what you would still have to build. A product that answers four of these questions with "you build that" can still be the right call, as the next section explains, provided you chose it on purpose.

Embedded AI assistant options in the market, by type

The list is unranked and alphabetical within each type. Each line comes from the vendor's own site or documentation, and where a line says what something is built for, that is the vendor's positioning. The last group has a single entry because Teaflask is the example of that kind that we know best, and we make it. Read that row as an illustration of the category, not a ranking within it.

Embedded AI assistant products grouped by type, with a one-line description and fit for each
ProductWhat it is and where it fits
UI component kits
assistant-uiOpen-source React components and a runtime (MIT licence) that own the thread, the stream and tool calls, connecting to your backend through adapters for the AI SDK, LangGraph, LangChain or others. Assistant Cloud hosts threads and persistence if you want them. Fits teams that have an agent backend and want a polished chat UI they can restyle.
OpenAI ChatKitOpenAI's embeddable chat UI, with widgets, tool-invocation support and file attachments. Your server authenticates each end user and runs the agent, with a Python SDK for storage and access control. OpenAI's docs say Agent Builder is scheduled to shut down on 30 November 2026 while ChatKit remains available. Fits teams that want OpenAI's chat UI over an agent they run themselves.
Agent toolkits
CopilotKitMIT-licensed open-source SDK and the maker of AG-UI, an open protocol between agents and user interfaces. The agent can act through your APIs and MCP tools or directly in your frontend. CopilotKit Intelligence adds persistent threads, memory and analytics, self-hosted or on CopilotKit Cloud. Fits teams that want to own the agent and prefer an open protocol.
Vercel AI SDKOpen-source TypeScript toolkit with one API across many model providers, streaming and built-in fallbacks. It supplies primitives; Vercel lists UI components (AI Elements) and resumable long-running agents (Workflows) as separate pieces. Fits TypeScript teams that want to build the assistant themselves.
Hosted bot builders with web widgets
BotpressAgent platform that positions itself around customer support, with a visual Agent Studio, knowledge bases, tables and an Agent Developer Kit, its pro-code toolkit for custom integrations and logic. It brings a helpdesk of its own, Botpress Desk, or works on top of yours. Webchat embeds by script tag or through a React library, as a toggle bubble or inside a page element. Fits support teams that want to build with little engineering.
Microsoft Copilot StudioGraphical low-code studio for agents, workflows and agent flows, with prebuilt or custom connectors and publishing to channels that include Teams, Microsoft Copilot, websites and mobile apps. Fits organizations already working in Microsoft tooling.
VoiceflowAgent platform for customer experience across web, app, messaging and voice, with Playbooks that turn support expertise into agent process, plus workflows, knowledge, tools, custom code and transcript review. Its web widget installs from a snippet and can float, pop over or sit inside a page. Fits CX teams that design conversation flows.
Support agents
Fin by IntercomCustomer-facing agent, which Fin's own site calls a Customer Agent, for service, sales, ecommerce and success. It is built natively into Intercom's helpdesk and works with several other helpdesks. It can take actions through your API, through Data Connectors (Fin's term for its data integrations) or through MCP (the Model Context Protocol, an open standard for giving agents tools), and it hands off to humans with context. Pricing is outcome-based. Fits teams reducing inbound ticket volume.
Full-stack embedded agents
TeaflaskEmbedded agent platform that presents the assistant as a corner widget with a drawer that docks as a sidebar, a ⌘K palette, a full page, or headless. Actions run in the user's browser session and Teaflask holds no backend credentials. Ask-first actions wait for approval, denied actions are never offered to the model, and turns survive tab close, crash and deploy. Ordered model routing with fallbacks, billing from a Teaflask balance or your own provider key, and docs and actions drafted from your repo. Limits to know: you write an adapter that connects actions to your API, and you adopt Teaflask's runtime instead of assembling your own.

Questions buyers ask

Is CopilotKit a copilot-as-a-service?

Mostly it is a toolkit. CopilotKit is an MIT-licensed open-source SDK and the maker of AG-UI, an open protocol between agents and user interfaces, and you build your agent against it and can self-host. Its managed pieces, CopilotKit Cloud and CopilotKit Intelligence, cover parts of the stack such as persistent threads, memory and analytics. By this guide's definition a copilot-as-a-service supplies the whole assistant, so CopilotKit sits between a toolkit and a managed platform. The useful test is which layers you would still build yourself.

Should we build or buy an embedded AI assistant?

Build the layers that make your product different from every other SaaS product, and buy the rest. The model calls and the chat interface are close to commodity. Identity, approvals, durable execution and knowledge freshness are slow, careful work that rarely differentiates you. Build the whole stack when the assistant is the product, when your policies rule out a hosted runtime, or when you already run an agent backend and only need a front end. Buy when the assistant is a feature you need and the runtime would be new infrastructure to staff.

What happened to CommandBar?

Amplitude announced its acquisition of Command AI, the company formerly called CommandBar, on 15 October 2024. On 11 February 2025 Amplitude launched Guides and Surveys and said Command AI's product was fully integrated into the Amplitude platform. We found no end-of-life notice for a standalone product, but we could not confirm which of CommandBar's earlier copilot and search features carried over, so ask Amplitude directly before you evaluate it.

How is an embedded AI assistant different from a help-center chatbot?

A help-center chatbot answers questions from documentation, usually in a widget on a marketing or support site. An embedded AI assistant lives inside the signed-in product, knows the user's context and can act: read the page, fill a form, call an API as the user. Some products do both, which is why the label is blurry. Judge a product by its answers on actions and identity rather than by where the widget sits on the screen.

Is it safe to let an AI assistant take actions in my product?

It is as safe as four things make it: actions run as the signed-in user, your API still enforces authorization, risky actions need a human yes that the runtime enforces, and the model can only request operations you granted. None of that makes the assistant's answers correct. Teaflask's documentation says these controls restrict what the agent can access and execute, and do not guarantee that every response or decision is right. Start with read-only actions, require approval for anything that changes data, and review the conversation logs.

Where to go next

If Teaflask is on your shortlist, start with these four. The two docs pages carry the detail behind every Teaflask answer in the checklist above.