United Airlines Shuts Its Site and Partners to AI Agents: Bots Can't Book Tickets

Picture a typical scenario from AI-agent presentations: you tell your assistant, "find and buy me a cheap ticket to Denver for Friday," and it goes to the airline's site on its own, enters your details, and pays. At United Airlines, that scenario is now off-limits. It is one of the first high-profile cases in which a major brand is not merely wary of agents but is shutting the door on them outright.

What exactly was banned

United announced that third-party AI agents may not book tickets on behalf of passengers. The restriction covers more than the airline's own website and app. The carrier is also closing access through travel agencies and aggregators, so that an agent can't sneak in by a roundabout route. The booking and ticketing rules are currently being updated to make the ban formal.

The first argument is security. To buy a ticket, an agent needs the user's personal data, including payment details. United believes that handing credentials to third-party assistants could lead to a leak, and that the tool's actions could result in unintended purchases, changes to the account, or unauthorized spending of MileagePlus miles. Put simply, if the agent makes a mistake or is deceived, the one who ends up blamed is not the agent but the customer and the airline.

The second argument is regulatory. To check in for a flight, a passenger must personally confirm that their baggage contains no prohibited items. If a bot clicks that on their behalf, the requirement is formally violated. For anyone building agents, this is a good example: in regulated industries, the "I confirm" action often cannot be delegated.

Security or control over the customer

Aviation analyst Henry Harteveldt of Atmosphere Research Group reads the story differently. In his words, United doesn't want yet another, potentially far more powerful intermediary on top of search engines like Google, price-comparison sites, and online travel agencies. Every ticket search costs the airline money, and an army of bots running ten queries per user would sharply raise those costs.

In practice, the ban has two layers: a legitimate fear for security, and the economics of distribution. Whoever controls the point where the customer chooses a ticket controls pricing, upselling, and behavioral data. An agent that compares fares on the user's behalf blurs that point.

At the same time, United has no intention of cutting itself off from search entirely. Harteveldt notes that tickets can still be found and bought through Kayak, Hopper, and Google Flights, and consumers shouldn't find it harder to locate good fares.

Others are taking a different path

The industry is not unanimous. Southwest Airlines has given ChatGPT users the ability to view information about their flights: the AI app accesses the airline's site under the airline's rules. This is a model of controlled access: the agent reads data but doesn't handle money.

Delta Air Lines, meanwhile, acknowledged that it uses a dynamic AI-based pricing model. Company president Glen Hauenstein told investors that each customer would be offered the price available on a particular flight at that moment. A Delta representative later clarified that the company is not testing or planning products that set individual prices based on customers' personal data.

What this means for developers and product managers

First, don't assume that "the agent will get in anywhere." If your product relies on a bot buying or processing something on other companies' sites, you face the risk of being blocked for legal and commercial reasons rather than technical ones.

Second, distinguish between reading and acting. Showing flights and prices is easier to get approved than paying, changing an account, or confirming legally significant statements. Aiming for official integrations like Southwest's approach looks safer than imitating a user.

Third, those who own a service need to decide what to do about agent traffic: calculate the cost of queries, write rules into the terms of use, and think about where a human must confirm an action personally.

A caveat: so far this is a statement and a rules update, not details of technical protection. How exactly United will tell an agent from a human is unclear from the announcement. But the signal to the market is clear: agents have received their first major "no" from the industry they were planning to automate.