United Airlines restricts unauthorized third-party AI agents from booking and managing trips

United Airlines said on 11 November that it is restricting “unauthorized, third-party personal AI agents or assistants” on its own digital platforms and, indirectly, through travel agencies and aggregators. The airline says it is updating its booking, ticketing and distribution policies to match.

What United gives as reasons

• Accounts and money. Sharing account credentials with an AI assistant “can expose sensitive information”, and the agent’s actions “may result in unintended purchases, account changes, or use of MileagePlus miles.”
• Regulation. United says automated actions could break FAA and DOT rules. Its example: check-in requires a human to confirm that bags do not contain banned items such as explosives.

What counts as unauthorized

United’s Digital Trust Center FAQ is specific:

• Any AI agent, bot, browser extension or browser feature that “searches, books, buys, manages or collects information on united.com or the United app for you” without United’s permission is unauthorized.
• Using AI to research and plan a trip is fine, “as long as the tool doesn’t access united.com or the United app.”
• Giving an assistant permission yourself does not change that: “Just because you’ve given access to AI assistants doesn’t mean United will permit an AI assistant to transact with United.”
• Travel agencies and booking platforms cannot use third-party AI agents to search, book or manage United travel on direct or indirect channels, and can use their own AI tools only with United’s permission.
• Does United work with any third-party agents? “Not yet.”
• Agent bookings made before 11 November 2026 will not be cancelled. Assistive technology for customers with disabilities is not affected.

InsideFlyer reports that the 11 November revision puts the restriction into United’s contract rules and gives the airline authority to cancel reservations handled by such agents. We did not open the rule text, so we are not quoting rule numbers here. United’s own pages do not describe how it will detect agents.

Where this fits

Retailers are splitting the same way. CNBC notes Amazon has blocked Meta’s Muse agent while Walmart partners with it, and Walmart now offers a sanctioned route with its MCP gateway and per-agent profiles. Detection is already contested: Cequence said Muse reached customers without declaring it was an agent.

Why this matters

If you build a travel or shopping agent, United has now said in writing that a customer’s consent is not enough and that agency channels are covered too, so an agent that books United through browser automation or a partner’s back end is outside its policy. United’s FAQ says it wants “standardized, secure technology integrations” before allowing agents, which points to permissioned APIs like Walmart’s gateway rather than scraping. Until United approves someone, design agents that research and hand the final United purchase back to the traveller.