United Airlines said Wednesday it is restricting access for third-party AI agents, becoming the first U.S. carrier to explicitly say it will bar unauthorized personal AI assistants from booking flights on travelers' behalf, according to Skift, which first detailed the policy alongside an exclusive report by The Wall Street Journal.
The restrictions cover both United's own digital platforms and access through online travel agencies and aggregators, closing off the two main paths an AI agent could use to search fares and complete a purchase.
For more context on how companies are responding to agentic AI, follow our AI policy coverage.
What United actually announced
In a statement reported by Skift, the airline framed the move as a security and compliance measure: "United is taking steps to restrict access — directly within our digital platforms and indirectly via travel agencies and aggregators — to prohibit use by unauthorized, third-party personal AI agents or assistants."
The company said sharing account credentials with third-party agents can expose sensitive personal information, and cited regulatory and consumer-safety concerns as part of its rationale. The timing is notable: Crain's Chicago Business reported the move lands ahead of the holidays, one of the busiest and highest-stakes booking periods of the year for U.S. airlines.
An industry moving the other way
Forbes framed the announcement as United bucking a growing trend. Across travel and e-commerce, companies have spent the past two years building for agentic AI — opening APIs, piloting agent-to-agent payment flows, and optimizing for a future in which software rather than humans comparison-shops and checks out. A major U.S. airline deliberately walling off that access is the strongest signal yet that not every industry sees agentic intermediaries as a benefit.
The market reaction underscored the stakes. The New York Post reported that Meta shares tumbled following United's announcement, as investors weighed what restricted access means for AI assistants with commerce ambitions. The story also drew heavy attention in the tech community, topping Hacker News with more than 300 points within hours.
Why airlines are wary of agents
The tension is structural. Airlines run some of the most dynamically priced inventory in consumer commerce, layered with loyalty programs, fare rules, co-branded credit card benefits and upsell paths that represent billions in ancillary revenue. An autonomous agent that books purely on price threatens to bypass the upsells, the loyalty hooks and the brand relationship entirely — while concentrating negotiating power in whichever agent controls the customer.
Security is the other pillar of United's stated position. Booking an airline ticket requires authenticated account access, stored payment credentials and personal data. If a traveler hands those credentials to a third-party agent, the airline loses its ability to verify who is actually acting on the account — and fraud, account takeover and dispute liability all become harder to untangle when the "customer" on the session was a bot following instructions from a prompt.
What it means for travelers
For now, travelers who book directly with United or through mainstream agencies face no change — the restrictions target autonomous third-party agents, not human customers or the agencies themselves. But the policy draws a clear line: if an AI assistant wants to act on a United account, it will need to be an authorized one.
That distinction may define the next phase of the agentic-AI debate. As personal AI assistants become more capable of completing transactions end-to-end, companies face a choice between embracing agents as a new interface or defending their own channels as the only trusted ones. United, ahead of the holiday rush, has chosen defense — and the rest of the travel industry now has a decision to make about whether to follow.
The regulatory dimension
United's statement pointedly cited regulatory concerns alongside consumer safety — language that suggests the airline is positioning itself as compliant rather than obstructionist. Governments on both sides of the Atlantic have spent 2026 drafting rules around autonomous agents: who is liable when an agent makes a bad purchase, how identity is verified when software acts on a person's behalf, and what disclosures consumers are owed. By framing agents as a compliance risk rather than a distribution opportunity, United aligns itself with the cautious reading of those emerging rules.
Airlines also have a long institutional memory of distribution battles. For decades, carriers have fought to pull bookings away from intermediaries and toward their own apps and websites, where they control pricing presentation, upsells and loyalty enrollment. An AI agent that re-intermediates the booking flow — sitting between the traveler and the airline, owning the query and the payment — runs directly into that history. United's move suggests the industry intends to treat agents the way it once treated screen-scraping fare sites: as unauthorized intermediaries to be blocked at the platform level.
Whether travelers ultimately side with the airlines or with their agents will shape the answer. But United has made the opening position of that negotiation unambiguous.
---
Stay Ahead of AIGet the latest AI news, analysis, and breakthroughs — all in one place.
Read more AI news →
