What is a human in the loop in AI?
What counts as a human in the loop?
Two tests. Can the person stop the action before it happens? Do they have the authority to refuse?
A weekly email that summarises what the AI already did fails the first test. A manager who approves every budget change before it goes live passes both.
The phrase "human oversight" can be used for either. That is the vagueness to watch. Reading a log after the fact is review. It is not a gate.
Why does it matter when AI tools touch ad accounts?
AI assistants can now be connected to marketing data and tools, for example through the Model Context Protocol. Once a tool can act, someone has to decide which actions need a person.
The MCP specification's wording is "should", so it is a recommendation. The same document says the protocol does not mandate any specific user interaction model, so whether a confirmation step exists depends on the client and the tool1. Do not assume the safeguard exists because a vendor mentions the protocol.
The gate also helps with prompt injection, where hidden instructions in content the AI reads try to steer it. A person who approves actions gets a chance to catch that. It does not guarantee it.
For ZFD: Our view is that actions with money or customer data attached need a named person's approval, and that numbers from AI tools still get checked. For where AI helps and where it fails, see what an AI analyst gets right and wrong.
Easily confused with
Human in the loop vs Agent washing
Relabelling an ordinary tool as an autonomous "agent". Asking where the human sits is one way to test the label.
Human in the loop vs Automation with alerts
An alert tells you something happened. A human in the loop decides whether it happens.
FAQ
Is "human in the loop" a legal requirement?
Not as a general definition. Where law applies to your use of AI, your counsel decides what it requires.
Does a human in the loop make AI output correct?
No. A person can approve a wrong answer. The gate stops unwanted actions. It does not check the sums.
Sources
- MCP specification: Tools (2025-06-18)Primary source
Let’s find what’s actually working.
Next step. Been pitched an AI tool and not sure what it does? Talk it through with us.