The S-Curve

Explainer ·

United bars outside AI agents from booking its flights

United says it is restricting third-party personal AI agents from its booking systems, citing security and safety. The economics of who owns the customer sit behind the move.

A United Airlines Boeing 737-900 in the airline's white and blue livery climbing after takeoff from Los Angeles
A United Airlines Boeing 737-900 departing Los Angeles International Airport. Photo: Tim, via Wikimedia Commons (CC0).

United Airlines said on Wednesday that it is restricting third-party personal AI agents from its booking systems, in a release titled “United Restricts Access for Third-Party AI Agents”.United, United Restricts Access for Third-Party AI Agents (release, 11 Nov 2026). United says it is acting “to prohibit use by unauthorized, third-party personal AI agents or assistants”. The restrictions apply on United’s own digital platforms and “indirectly via travel agencies and aggregators”. The airline says the work includes updates to its booking, ticketing and distribution policies.

In practice, according to The Wall Street Journal as reported by Quartz, agents “can still surface United’s available flights and fares for customers, but they cannot finalize a purchase through the carrier’s site”.Quartz, United Airlines is blocking personal AI agents from booking flights (Cris Tolomia, 11 Nov 2026), citing The….

United’s stated reasons

United gives security and safety reasons, and they are specific. The release says “sharing account credentials with personal, third-party, AI assistants can expose sensitive information”. It also says agent use “may result in unintended purchases, account changes, or use of MileagePlus miles”.

The airline also points to federal rules. United says “these automated AI actions have the potential to violate FAA and DOT regulations”. Its example is check-in, which it says “requires human acknowledgment that bags do not contain banned substances like explosives”.

United directs customers to its own app, which it calls an “award-winning United app to securely empower customers to manage their own travel experience”. It says banks and retailers have moved first: “Corporate leaders in the banking and retail industries have taken similar actions regarding AI agents”. For customers whose agent acts anyway, United says it will explain “where to get help if an agent takes an unintended action”. It adds that it will keep evaluating how these tools interact with its services as they evolve.

The Journal reported that United is seeing little booking activity from AI agents so far, and that its back-end systems can tell whether a reservation was made by a person, a conventional travel agency or an automated assistant.

“Another middleman”

Chief executive Scott Kirby spoke on Tuesday at an event in Chicago, according to the Journal’s reporting as relayed by Quartz. He said: “To be honest, I don’t want to create another middleman.”

The analyst Eric Seufert made the economic case for that view, as it applies to retailers, in an essay titled “Agentic commerce is a mirage” on his Mobile Dev Memo site.Eric Seufert, Agentic commerce is a mirage (Mobile Dev Memo). Seufert argues that Amazon gets as much value, if not more, “from the user-level data artifacts created by a transaction than from the transaction itself”. In his view, the extra sales an outside agent brings are limited: “the additional transaction opportunity is likely marginal at best”.

Seufert asks why a platform would yield the shopping experience to “a third-party product that disintermediates them from their users”. He writes that large platforms “prefer to layer their own agents into the retail experience, where they control the surface area and can monetize it with advertising”. On his reading, independent agentic commerce “runs counter to the incentive structure of the largest retail platforms”. Seufert still calls the shift inevitable: “I see it as inevitable.”

Seufert wrote about retailers, not airlines. An agent that books a flight would sit in the same place he describes, between the seller and its customer, which is the place Kirby says he does not want to fill.

Not agents versus none, but whose terms

United is also listed on the Personal Agent Protocol design partners page, under Companies.Personal Agent Protocol, Path to 1.0 (design partners). The page lists “Partners that have agreed to be listed”, and the personal agents on it are Instinct, Meta and OpenAI. A listing means United agreed to be named. It does not mean United ships an integration.

The protocol describes itself as “An open protocol for every company and every personal agent.” Its home page says: “Companies decide how to empower agents and what they can do.”Personal Agent Protocol, home page. United’s restriction is aimed at unauthorized agents. The protocol is built for the other kind, the ones a company has agreed to let in on its own terms. Read together, the two say United is not shutting out agents as such. It is shutting out agents it has not authorized, while it keeps evaluating the rest.

Other airlines differ

The Journal reported that other U.S. airlines have yet to publicly come out against AI agents. Delta Air Lines said authenticated AI assistants can complete bookings, according to Quartz’s account of the Journal’s reporting. Quartz reported that Southwest Airlines rolled out a plug-in in ChatGPT earlier this year.

Who holds the customer when an agent does the booking is the same question our eBay explainer asks of retailers. United’s answer, for now, is that it does.

Sources

  1. United, United Restricts Access for Third-Party AI Agents (release, 11 Nov 2026)
  2. Quartz, United Airlines is blocking personal AI agents from booking flights (Cris Tolomia, 11 Nov 2026), citing The...
  3. Personal Agent Protocol, Path to 1.0 (design partners)
  4. Personal Agent Protocol, home page
  5. Eric Seufert, Agentic commerce is a mirage (Mobile Dev Memo)

Disclosure

This article was drafted by S-Curve Desk, an AI system, from the sources above. Boaz Sobrado reviewed it before publication. Errors: the corrections log, or write to us.