AgentsAutonomy & tool use
United Airlines bars third-party AI agents from booking, changing or checking in for flights
United's revised Contract of Carriage lets AI assistants search and display fares but bars them from booking, changing, upgrading or checking in, even with human approval, and threatens cancelled tickets and closed MileagePlus accounts for violations.
From the The Verge · AI article of November 11, 2026 and cited sources: The rule is defined by the kind of tool, not by how much a human oversees it. [2] [3] [4]
SOURCES[2] PPC Land: United bans AI agents from buying its tickets… ppc.land[3] Quartz: United Airlines is blocking personal AI agents qz.com[4] Skift: United Airlines Moves to Block Personal AI Agents skift.com
AT Pulse research deskPublished · Updated · 5 min read · AI-assisted analysisAI-assisted, not human-edited. Methodology Corrections Who owns this site
- What happened
- The rule is defined by the kind of tool, not by how much a human oversees it. [2] [3] [4]
- Original source
- The Verge · AI article, independent perspective
- Brief by
- AT Pulse research desk AI-assisted; publisher and contact on the desk page
- When
- November 11, 2026 article published
- Covered
- Nov 12 edition
- Evidence
- 11 sources across 11 sites
- 1United won’t let your AI agent book your flighttheverge.com
- 2PPC Land: United bans AI agents from buying its tickets…ppc.land
- 3Quartz: United Airlines is blocking personal AI agentsqz.com
- 4Skift: United Airlines Moves to Block Personal AI Agentsskift.com
- 5Value Added Resource: eBay Explicitly Bans AI "Buy For Me"…valueaddedresource.net
- 6EcommerceBytes: eBay Bans AI Shopping Agentsecommercebytes.com
Reach: not measured yet
The rule is defined by the kind of tool, not by how much a human oversees it. It covers assistants built into social, messaging and search platforms, AI browsers and standalone agents, and AI tools used by travel agencies. Human approval does not exempt an agent. The ban applies on United's own channels and through online travel agencies. Reported penalties include cancelled bookings, invalidated tickets and terminated MileagePlus accounts. United is the first US carrier to state such a policy explicitly. [2] [3] [4]
United cites privacy and FAA/DOT rules. One concrete example is check-in, which requires a person to confirm that bags contain no hazardous items. CEO Scott Kirby also said he does not want another middleman between United and its customers, which points to control over distribution as a motive. Commentators add that the policy protects dynamic pricing and stops automated rebooking when fares drop, though United has not said this. [1] [4] [9] [10] [11]
United's move is part of a wider pattern of companies keeping discovery open but restricting transactions. eBay banned unapproved buy-for-me agents in early 2026 but still allows approved partners. Major US banks have limited outside agents' access to customer accounts, citing credential sharing. For agent builders, this suggests purchases will increasingly depend on authenticated, negotiated access rather than browser automation. [5] [6] [7] [8]
United has written transaction-gating into its contract while leaving discovery open.
Read the full assessment
Implication: agent builders should expect search-only access at large merchants, with purchases depending on negotiated, authenticated partnerships; account holders, not agent vendors, bear the penalty risk.
Executive brief
United Airlines says it may cancel reservations, invalidate tickets and terminate MileagePlus accounts when a third-party AI agent buys or changes a booking. A human supervising or approving the agent's actions does not make it allowed. AI assistants can still search and display United fares, but they cannot finish a purchase, whether on United's site or through travel agencies. United points to privacy and FAA/DOT rules. CEO Scott Kirby also said he does not want "another middleman", which suggests protecting United's control over distribution is a major reason too. United is the first US carrier to state this policy explicitly.
What changed and event timeline
eBay bans "buy-for-me" agents
eBay's user agreement now prohibits LLM-driven bots and any end-to-end ordering flow that skips human review unless eBay approves them first. The rule took effect Feb 20.
- Mid Oct 2026
Major US banks restrict agents
JPMorgan, Citi, Bank of America and others limited outside agents' access to customer accounts, citing credential sharing and agents acting beyond instructions. Reports differ on the exact list of banks.
Kirby's "middleman" remark
At a Chicago event, United's CEO said he doesn't want to create another middleman. The Wall Street Journal reported the remark first.
More detail
Contract of Carriage revised
New Rule 6.J.6 reportedly bars AI agents from making, modifying or servicing tickets and from buying seats, upgrades or ancillaries.
Policy reported widely
Coverage notes that agents also cannot complete check-in, because check-in needs a human to attest about hazardous items in bags.
More detail
Capabilities and access
- Allowed: agents can search and display United flights and fares. Quartz
- Blocked: booking, changes, seats, upgrades, ancillaries, partner products and check-in, whether on United's own channels or through online travel agencies and aggregators. PPC Land
- Products named in coverage: Meta's Muse and OpenAI's Dots (The Verge), plus xAI's Grok (Thrifty Traveler). United did not single out any specific model versions.
Read the full section
- Allowed: agents can search and display United flights and fares. Quartz
- Blocked: booking, changes, seats, upgrades, ancillaries, partner products and check-in, whether on United's own channels or through online travel agencies and aggregators. PPC Land
- Products named in coverage: Meta's Muse and OpenAI's Dots (The Verge), plus xAI's Grok (Thrifty Traveler). United did not single out any specific model versions.
Technical analysis for researchers and developers
- What the rule covers: it is written around the type of tool, not the level of oversight. And AI tools used by travel agencies.
- Enforcement is unclear: there is no established standard for telling agent traffic apart from human traffic.
- Architecture options: security commentators in banking push for scoped OAuth/API delegation, read-only tiers and revocable permissions instead of shared passwords. eSecurity Planet
Read the full section
- What the rule covers: it is written around the type of tool, not the level of oversight. Three categories are listed: assistants embedded in social, messaging and search platforms; AI browsers and standalone agents; and AI tools used by travel agencies. Human-in-the-loop approval explicitly does not exempt an agent. PPC Land
- Enforcement is unclear: there is no established standard for telling agent traffic apart from human traffic. Arkose Labs reports that 97.7% of legitimate AI sessions lack verified identification; this figure comes via PPC Land. PPC Land
- Architecture options: security commentators in banking push for scoped OAuth/API delegation, read-only tiers and revocable permissions instead of shared passwords. eSecurity Planet
- Attestation: regulatory steps that require a human declaration, such as the hazmat bag question, break fully autonomous check-in flows.
Claims and evidence
- Few agent bookings so far: United says it has seen little agent booking activity. This is the company's own claim. The Verge
- Regulatory risk: United says agent actions could violate FAA/DOT rules. The specific rules have not been publicly itemized beyond the hazmat attestation. Skift
- Commercial motive: commentators read the policy as protecting dynamic pricing and stopping automated rebooking when fares drop.
Read the full section
- Few agent bookings so far: United says it has seen little agent booking activity. This is the company's own claim. The Verge
- Regulatory risk: United says agent actions could violate FAA/DOT rules. The specific rules have not been publicly itemized beyond the hazmat attestation. Skift
- Commercial motive: commentators read the policy as protecting dynamic pricing and stopping automated rebooking when fares drop. That is their analysis, not something United has stated. Thrifty Traveler, investingLive
- Rule text: the Rule 6.J.6 wording and penalties come from secondary reporting, which cites View from the Wing and InsideFlyer. Independent corroboration from the published contract text is not available. PPC Land
Context and prior work
- Retail: eBay first updated its robots.txt in December 2025, then formalized the restriction in its user agreement. It still lets approved partners in. Value Added Resource
- Amazon and Walmart: Amazon has used litigation and technical blocks, and Walmart has used conditional terms. PPC Land
- Banks: six global banks, including Bank of America and Capital One, co-signed "Building Trust in Agentic Commerce," which calls for industry standards before agents make large-scale purchases. FintechWeekly
Read the full section
- Retail: eBay first updated its robots.txt in December 2025, then formalized the restriction in its user agreement. It still lets approved partners in. Value Added Resource
- Amazon and Walmart: Amazon has used litigation and technical blocks, and Walmart has used conditional terms. PPC Land
- Banks: six global banks, including Bank of America and Capital One, co-signed "Building Trust in Agentic Commerce," which calls for industry standards before agents make large-scale purchases. FintechWeekly
- Other airlines: Southwest launched a ChatGPT plug-in for flight search. OpenAI acquired the AI travel agent Odessia. Skift
Limitations, safety and contested findings
- Delta's position is reported inconsistently. Skift quotes CEO Ed Bastian as "cautious." Thrifty Traveler says Delta allows authenticated AI bookings with extra safeguards.
- The "rogue agent" framing is disputed.
- Consumer demand is uncertain.
Read the full section
- Delta's position is reported inconsistently. Skift quotes CEO Ed Bastian as "cautious." Thrifty Traveler says Delta allows authenticated AI bookings with extra safeguards. Skift, Thrifty Traveler
- The "rogue agent" framing is disputed. Approov's CEO argues the real failure is people handing their credentials to AI software, not machines acting on their own. eSecurity Planet
- Consumer demand is uncertain. A HUMAN Security survey (June 2026) found 54% of consumers comfortable with AI trip planning but only 12% with autonomous booking. PPC Land
- United leaves room to change course. It says it could reconsider once protections for travelers exist. The Verge
Business and practitioner implications
- For agent builders: plan for search-only access at large merchants. Getting transactions through will increasingly depend on negotiated, authenticated partnerships rather than browser automation.
- For users: the risk falls on the account holder. Reported penalties include losing miles and elite status. PPC Land
- For merchants: United's approach (keep discovery open, gate the transaction) is a template other companies can copy to keep their direct customer relationships.
Read the full section
- For agent builders: plan for search-only access at large merchants. Getting transactions through will increasingly depend on negotiated, authenticated partnerships rather than browser automation.
- For users: the risk falls on the account holder. Reported penalties include losing miles and elite status. PPC Land
- For merchants: United's approach (keep discovery open, gate the transaction) is a template other companies can copy to keep their direct customer relationships.
- For platforms: consumer products such as Meta's Muse, which treats travel as a top use case, lose their most valuable step. Skift
The source trail.
Sources (11)
United won’t let your AI agent book your flight
Article text retrieved; extracted text may omit tables or interactive elements.
theverge.com