United Airlines blocks AI agents from booking flights over security and compliance concerns

United Airlines has banned third-party personal AI assistants from booking flights on behalf of travellers, citing security risks and the possibility that agent-driven actions could conflict with federal regulations. The policy, announced on Wednesday, applies to tools such as Meta's Muse and OpenAI's Dots that consumers increasingly use to research products and complete purchases.

What the new policy covers

According to CBS News, United is updating its booking and ticketing rules to bar unauthorised third-party personal AI agents and assistants, and is enforcing the restriction on two fronts: directly within its own digital platforms, and indirectly through the travel agencies and aggregators that sell its fares.

The prohibition targets the transaction rather than the research. As The Verge explains, AI agents will still be able to show users United flights, but they will not be able to complete a booking on a customer's behalf.

United's stated rationale

United laid out two main concerns. The first is data exposure: for an agent to book a ticket, a traveller generally has to hand over account credentials and payment details. The airline warned that sharing logins with third-party AI assistants "can expose sensitive information" and that actions taken by such tools "may result in unintended purchases, account changes, or use of MileagePlus miles."

The second is regulatory compliance. CBS News reports that United pointed to federal rules requiring travellers to verify in person that their luggage contains no banned substances — a step an AI agent cannot perform on a passenger's behalf. The Verge notes a similar concern around information airlines are obliged to share with customers, such as attesting that a bag contains no explosives.

Notably, the move appears proactive rather than reactive. The Verge, citing The Wall Street Journal, reports that United said it has not yet seen many customers try to book flights through agents — an experience echoed by other companies such as DoorDash. United CEO Scott Kirby, speaking at an event on Tuesday, was blunt about the strategic dimension: "To be honest, I don't want to create another middleman."

A split across industries

United's decision lands amid a wider fight over whether autonomous agents should be allowed to transact on commercial websites. The Verge reports that eBay has appeared to block agents from browsing its site, and that several major banks have imposed their own restrictions. Other airlines are moving the opposite way: per CBS News, Southwest has made its flight inventory viewable to ChatGPT users, who can reach the airline's website through the AI app.

Aviation analyst Henry Harteveldt of Atmosphere Research Group told CBS News that United's goal is retaining control of the booking funnel. The airline already contends with intermediaries such as Google search, metasearch sites and online travel agencies, and flight searches cost airlines money — giving United little appetite for a surge of bot-driven queries. He added that United fares will remain bookable through aggregators like Kayak, Hopper and Google Flights, so travellers should not struggle to find good fares, though blocking the bots does not make them any easier to find either.

United also signalled that the door is not permanently closed. It said it sees the opportunities that advancing third-party agents present, but wants established protections for travellers in place before allowing agents to interact directly with a United account or booking.

Why it matters

The policy is an early, high-profile boundary line in agentic commerce. Flight booking is precisely the kind of high-value, multi-step task that personal AI assistants are being built to handle, and a major carrier opting out narrows the near-term usefulness of products like Muse and Dots. It also frames a concrete technical problem for the agent ecosystem: the friction is not capability but credentials and legally required attestations that presume a human in the loop. If more banks, marketplaces and airlines follow United's approach, agent developers may need new payment rails and identity or verification protocols — rather than shared passwords — before autonomous booking goes mainstream. Conversely, Southwest's openness shows the market splitting, and whichever model prevails will help decide who owns the customer relationship in an agent-driven web.