There's still an agent between the user and the LLM. The model isn't making the tool calls and has no mechanism of its own to accomplish this.