United just banned your AI assistant from buying its tickets

On Wednesday United Airlines told the AI industry to stay out of its checkout. In a release titled "United Restricts Access for Third-Party AI Agents," the airline said it is moving "to prohibit use by unauthorized, third-party personal AI agents or assistants." The block covers United's own website and app, and also agents that come in sideways through travel agencies and aggregators. The airline says the work "includes updates to our booking, ticketing and distribution policies."

In plain terms: if you hand a chatbot your MileagePlus login and tell it to grab the cheapest seat to Denver, United now treats that as unauthorized use of its systems.

The agents can still look. According to PYMNTS, AI assistants can still search United flights and show prices. They just can't be the ones that buy.

How these agents work matters here. Many of the consumer agents on the market do it the crude way: they open a browser, log in as you with the password you gave them, and click through the same pages you would. To the airline's servers, that session is you. If the agent misreads a fare rule, picks the wrong date or spends 60,000 miles on a seat you meant to pay cash for, there is no clean way to tell afterwards who made the call.

The official reasons

United gives two. The first is security. "Protecting our customers' data and accounts is a priority for United," the release says, and "sharing account credentials with personal, third-party, AI assistants can expose sensitive information." The airline lists the failures it worries about: unintended purchases, account changes and miles spent that the customer never meant to spend.

The second is regulatory, and it's the more interesting one. United says automated actions by AI agents "have the potential to violate FAA and DOT regulations." Its example is check-in, where a passenger has to personally confirm their bags hold no banned substances. A bot ticking that box for you is, in United's reading, a hazardous materials declaration that no human actually made.

Both reasons hold up. Neither is the whole story.

The middleman problem

United CEO Scott Kirby gave the other reason at an industry event in Chicago, as PYMNTS reported it: "To be honest, I don't want to create another middleman."

Airlines spent two decades pulling customers off online travel agencies and onto their own apps, where they can sell seat upgrades, bag fees and co-branded credit cards without paying anyone a commission. An AI agent that books for you is a new travel agency, one that never sees the upsell screen and has no loyalty to the airline's margins. If agents become the normal way people buy flights, the airline loses the direct line to the customer it fought so hard to win back. United says bookings from AI agents "remain minimal" for now, per PYMNTS. Shutting the door while the traffic is small costs almost nothing.

Not every carrier agrees. Delta has not followed United, according to PYMNTS, and lets AI assistants that can authenticate a passenger's credentials complete bookings. Airbnb is going the other direction entirely: CEO Brian Chesky has said the company will build its own agent, with "all bookings going through the app for every vertical in travel." The pattern is the same either way. Companies are fine with AI agents, as long as the agent is theirs.

Banks drew this line first. Bank of America warned customers in late October not to share passwords with AI assistants, TechCrunch noted, and JPMorgan Chase barred outside agents from customer accounts about a month ago. Jamie Dimon's version of the argument was blunter than United's: "You don't want rogue agents, and there could be thousands of them." United's release goes a step further and lobbies everyone else, saying "we encourage others to consider measures that preserve the data and security of their customers."

What United hasn't explained is how it will tell the difference. An agent driving a browser with your password looks a lot like you driving a browser with your password. The airline says it will post details on its Digital Trust Center page about what the rules mean for customers. Until then the deal is simple: your assistant can find the fare, and you have to press buy.

Sources: United Airlines newsroom, TechCrunch, PYMNTS.