United Airlines Bans Unauthorized AI Agents From Booking Travel

United Airlines announced on November 11, 2026 that it is barring unauthorized third-party AI agents from booking, servicing or purchasing travel through its digital platforms and indirect distribution channels. The airline cited privacy and account-security risks, unintended transactions and potential conflicts with Federal Aviation Administration (FAA) and U.S. Department of Transportation requirements. The move makes United one of the first major U.S. carriers to draw a hard contractual line against autonomous booking software, at a moment when consumer AI assistants are rapidly gaining the ability to act on users' behalf across the web.

The stakes are concrete. United says sharing account credentials with personal AI assistants can expose sensitive information, while agent actions may produce unintended purchases, account changes or use of MileagePlus frequent-flyer miles. Automated booking also collides with regulatory duties the airline cannot delegate to software.

What does the safety argument look like?

United's aviation example is check-in, where a person must acknowledge that bags do not contain banned substances such as explosives. The airline says automated actions have the potential to violate FAA and DOT regulations, while automatic check-in could cause travelers to miss important safety content. The point is narrow but significant: some steps in air travel are legally tied to a human acknowledgment that no algorithm can truthfully make on a passenger's behalf.

The policy also separates customer permission from airline permission. A traveler may authorize an assistant without United being required to let it transact. United's customer guidance states plainly that the airline does not yet work with any third-party AI agents. That distinction puts the burden on AI vendors and intermediaries to negotiate approved technical integrations, not on passengers to assume their own authorization suffices.

What can travelers still do with AI?

AI-assisted research and planning remain permitted when the tools use general information and do not access united.com or the United app. The boundary is access, not assistance. United advises customers not to provide credentials, confirmation numbers, MileagePlus details or other sensitive information. Customers can review AI-generated text and run resulting searches themselves on United's website or app.

The policy is not retroactive. Bookings made by third-party agents before November 11, 2026 will not be canceled. United's guidance recommends several immediate steps for travelers who already shared access:

• Review recent travel plans to confirm correct booking and ticketing
• Change passwords immediately after sharing MileagePlus login details
• Secure accounts after suspected unauthorized access or purchases

How broad is the contract's definition of an AI agent?

The Contract of Carriage, revised November 11, 2026, defines an AI agent as software or a service taking autonomous or semi-autonomous action, even when a passenger or another person supervises or approves its actions. The definition covers discovering, searching, booking, purchasing, ticketing, servicing and managing products offered by or through United, including flights, seats, upgrades, ancillary products and partner products.

That scope is deliberately wide. It includes:

• Assistants built into social media, messaging, search and other consumer platforms
• AI-enabled browsers
• Standalone agents
• Third-party assistants reaching United through connections supplied by travel agencies or other intermediaries

The contract prohibits AI agents from making, modifying or servicing tickets and from purchasing services or products. It also lists reservations made, modified or serviced by AI agents among bookings United may cancel without notice.

What enforcement powers does United reserve?

For tickets involved in violations, the available remedies extend well beyond cancellation. United reserves rights including:

• Invalidating tickets
• Canceling remaining itinerary segments
• Deleting MileagePlus miles or other benefits
• Revoking elite status
• Terminating program membership
• Taking legal action

The escalation ladder matters for anyone testing the boundaries. A single AI-assisted booking could, under the revised terms, cost a traveler an entire itinerary, a loyalty balance and elite status simultaneously.

What do the website terms change?

United's updated website terms require prior written permission for automated-agent access to united.com or the mobile app, and allow the airline to block or limit such agents. The terms also carry a clause aimed squarely at the AI industry: they prohibit using fares, schedules, availability, pricing or other site and app data to train, fine-tune, ground, evaluate or otherwise develop any AI or machine-learning model or system.

That data clause closes a second front. Even agents that never transact cannot legally mine United's pricing and availability data as training or grounding material (the process of supplying external data to a model to improve its answers), a restriction that echoes broader disputes between content and platform owners and AI developers over what data automated systems may consume.

Which tools are exempt?

The website terms carve out several categories:

• Disability assistive technology
• Standard browsers operated by a person, but not their automated-agent features
• Limited tools that only turn a person's voice or text into a search the person runs and reviews
• Public-page search indexing
• Tools operated by or for United

Travel agencies and booking platforms receive no such exemption. They may not use third-party AI agents to search for, book or manage United travel on direct or indirect channels, and agencies' own third-party AI tools require United's permission. The restriction extends United's control past its own website into the distribution layer where much of the industry's booking volume actually flows.

Is there a path back for AI booking?

Yes, and United has defined it. The airline says it wants standardized, secure technology integrations with privacy, security, authorization and accountability protections before allowing agents to interact directly with accounts or bookings. That makes approved integrations, rather than customer-shared credentials, the gate for AI-managed travel on its channels, preserving a path for automated booking under airline-defined controls.

The position is strategically clear. United is not rejecting AI-mediated travel in principle; it is rejecting AI-mediated travel it does not control. Any future in which an assistant books a United flight will run through airline-approved APIs with defined authorization and accountability, not through a chatbot holding a passenger's password.

For the wider market, the November 11 policy sets a template other carriers and travel suppliers can copy: a broad contractual definition of agency, cancellation rights without notice, loyalty-program penalties, and an outright ban on using operational data to build AI models. How quickly AI developers negotiate the standardized integrations United says it wants will determine whether autonomous booking becomes a sanctioned channel or remains a contract violation.