United Airlines Restricts Third-Party AI Agents From Booking Flights

United Airlines has updated its website terms and legal Contract of Carriage to explicitly ban unauthorized third-party artificial intelligence agents and automated personal assistants from accessing its digital platforms to book flights, alter itineraries, or manage passenger reservations. The Chicago-based carrier is the first major global airline to implement strict contractual barriers against the emerging generation of agentic AI assistants.

The policy modification, which took effect across united.com and the carrier's mobile application on 11 November 2026, defines and prohibits "Automated Agents" from conducting transactions on behalf of travellers without prior written authorisation. While consumers remain free to utilize AI tools for research, flight discovery, and itinerary planning, the final reservation and purchase steps must be executed directly by human passengers.

Prohibiting Automated Agentic Transactions

Under the revised digital policy, United strictly forbids any software bot, autonomous workflow, or artificial intelligence agent from creating bookings, processing payment transactions, selecting seats, or modifying flight segments. The ban applies across all direct consumer interfaces, web portals, and application programming interfaces not specifically licenced for corporate travel management.

United warned that reservations discovered to have been generated or altered by unauthorized AI agents risk immediate cancellation without notice. Furthermore, the updated terms explicitly prohibit technology companies and developers from scraping flight availability, schedules, and pricing data to train, fine-tune, or benchmark commercial machine learning and generative artificial intelligence models.

Security Risks and Passenger Privacy Concerns

Airline executives emphasized that cybersecurity and passenger privacy considerations were paramount in establishing the restriction. The carrier highlighted the operational hazards associated with passengers handing over digital credentials, payment details, and personal data to autonomous third-party bots operating without direct airline oversight.

A primary concern involves the vulnerability of frequent flyer profiles within United's MileagePlus loyalty ecosystem. Allowing automated bots continuous account access presents significant exposure to credential theft, unauthorized redemption of accumulated miles, and unintended transactional charges resulting from hallucinated AI decision-making.

Regulatory Compliance and Hazardous Goods Declarations

Beyond commercial and cybersecurity protections, United cited critical aviation safety and federal statutory mandates as a primary catalyst for the rule. Both Federal Aviation Administration and Department of Transportation regulations require individuals to personally complete check-in acknowledgements and passenger declarations regarding dangerous goods.

Federal statutes mandate that travellers confirm in person that their luggage contains no prohibited hazardous items, loose lithium batteries, or incendiary materials. United stressed that an automated digital bot cannot legally certify hazardous materials compliance on behalf of a human passenger, making autonomous bot-driven check-in non-compliant with federal aviation safety standards.

Contrasting Approaches Across the Airline Industry

United's defensive stance highlights an emerging philosophical divide across commercial aviation regarding generative technology and automated distribution channels. Legacy competitors such as Delta Air Lines and American Airlines have thus far maintained more permissive postures, advising that travellers assume individual liability when employing third-party digital assistants.

Industry analysts observe that by restricting third-party AI agents, United aims to safeguard its direct customer relationships and prevent intermediary platforms from disintermediating high-margin ancillary sales, premium cabin upgrades, and direct co-branded credit card promotions. The move sets a legal precedent that international carriers and global airline alliances are expected to evaluate as autonomous digital agents proliferate.