United Airlines blocks AI agents from booking flights — search stays, human approval is no exemption

A major US airline has, for the first time, said in public that an AI assistant may not buy its tickets for you. On Wednesday, November 11, 2026 (US time), United Airlines posted a short statement titled "United Restricts Access for Third-Party AI Agents." It says the airline is taking steps to restrict access, "directly within our digital platforms and indirectly via travel agencies and aggregators," to prohibit use by "unauthorized, third-party personal AI agents or assistants," and that the work includes updates to its booking, ticketing and distribution policies. Skift and AirlineGeeks describe United as the first US carrier to state such a policy.

What is blocked is the purchase, not the search. The Wall Street Journal reported that AI tools can still present United flights and prices. The final step has to be taken by a person, on United's site or app or on an agency's page. A contract of carriage revision dated the same day reportedly goes further than the statement: a reservation made by an AI agent can be cancelled even if a human watched and approved every step. The announcement lands two weeks before US Thanksgiving on November 26.

1. What is blocked and what is left

The statement runs six paragraphs and names no product. The operative detail sits in United's contract of carriage, the legal terms a passenger accepts by buying a ticket, and in its website terms. The travel site View from the Wing and the trade publication PPC Land quoted the new language.

The definition lists three kinds of software: assistants built into social, messaging, search or other consumer platforms; AI-enabled browsers and standalone agents; and third-party assistants that reach United through an intermediary. Press reports use Meta's Muse and xAI's Grok as examples, but United did not name them.

One mismatch is worth noting. The contract provision targets booking and purchasing, while the website terms quoted by CellCog also list "search" among the things an automated agent may not do without permission. That does not sit neatly with the reported assurance that agents may keep displaying fares. How far United actually enforces will be clearer once it publishes the guidance it has promised.

2. The stated reasons and the one the CEO gave

The first two match what banks said in October. When software logs in with a customer's username and password, the company cannot tell who is at the keyboard, and responsibility for mistakes is unclear. United makes the link itself, writing that leaders in banking and retail have taken similar actions and encouraging other companies to do the same.

The third reason drew pushback. Gary Leff of View from the Wing argues that the federal hazardous-materials rule, 49 CFR 175.25, requires notices at purchase and check-in and a passenger acknowledgment, not that every other step be done by hand. An agent could pause at that point and hand over to the traveler.

A reason absent from the statement came from the chief executive. According to the Wall Street Journal, Scott Kirby told an event in Chicago on November 10, a day before the announcement: "To be honest, I don't want to create another middleman." Airlines have spent decades contesting fees and customer access with reservation systems, online travel agencies and fare-comparison sites. Henry Harteveldt of Atmosphere Research Group told CBS that United does not want "yet another, and potentially even more powerful, intermediary," and noted that every fare search costs an airline money, so a surge of bot queries is a cost in itself.

Thrifty Traveler adds a further calculation. United dropped most change fees in 2020, so a traveler can rebook when a fare falls and keep the difference as travel credit. Few people bother. An agent could check every hour until departure and do it automatically. That is the outlet's analysis, not a reason United has given.

United has reportedly said agent bookings are still rare. A figure Engadget cites from Uber's third-quarter call shows the scale: in the week of Halloween, Uber handled 320 million trips and deliveries, of which AI agents placed 500 food orders and four rides. Restricting a channel is cheapest while almost nobody uses it.

3. Others: who is closing the door and who is opening it

All four draw the line in the same place. Reading is tolerated; the step where money moves is not. And each puts its own tool where the outside agent would have stood. On November 6 Amazon added ordering by text message to Alexa for Shopping, starting with invited US customers and expanding to millions more within weeks. United's statement likewise opens with a paragraph about its own app.

Within the airline industry the approaches differ.

The two accounts of Delta can both be true if Delta accepts only agents that come through a route it recognizes, but no Delta document confirming either was found.

Whether an official route into United survives can be read only from its wording. The statement restricts "unauthorized" agents, and the website terms bar them "without United's prior written permission." A door exists on paper. Nothing says who holds permission or how to ask for it.

4. What is still open

Three practical points follow. A booking made by handing an assistant a MileagePlus login is now, by the reported contract terms, eligible for cancellation. The contract reportedly also disclaims liability for losses from such cancellations. And using AI to find a flight, then paying yourself, is unaffected. Because the contract of carriage binds anyone who buys a United ticket, the same holds for travelers buying outside the United States.

United has not said the door is locked for good. Its last sentence promises to keep evaluating how personal AI assistants interact with its services. The other side is moving as well: Skift reports that OpenAI bought the AI travel service Odessia on November 10, and Meta's Mark Zuckerberg has called travel a top use case for Muse. Card networks are building standards that let an agent identify itself and pay within set limits. Whether airlines accept those standards, and who pays the fee if they do, is the next dispute.

Our earlier coverage sets out the banking precedent in the report on Schwab and JPMorgan blocking outside AI agents, explains the login-sharing method at issue in the screen scraping explainer, and covers how an agent can prove whom it acts for and pay without holding a card number in the explainers on AI agent identity, OAuth and AI agent payments.