On 11 November 2026, United Airlines announced that it is prohibiting unauthorized third-party AI agents from booking, servicing or buying travel through its digital platforms and, indirectly, through travel agencies and aggregators. The move is an early, concrete example of a major commercial operator using its own terms to set the conditions under which automated agents may act for a customer.
What was announced
According to CNBC, United said it would restrict AI bots’ access to its digital platforms, citing data security, and plans to update its booking, ticketing and distribution policies. Skift quotes United’s stated aim “to prohibit use by unauthorized, third-party personal AI agents or assistants”, and reports that the airline will evaluate the policy as personal AI assistants evolve.
The reasons United gave, as reported by both outlets, were:
- Sharing account credentials with a third-party AI assistant can expose sensitive information.
- Agents could make unintended purchases, change accounts or redeem frequent-flyer miles without the traveler’s intent.
- Automated flight check-in could conflict with U.S. aviation rules, because check-in requires a person to confirm that bags contain no prohibited items.
Contract of Carriage and website terms
Unite.AI reports further detail from United’s revised Contract of Carriage and website terms, both dated 11 November 2026. Those details were not repeated in the CNBC or Skift coverage, so treat them as reported rather than independently confirmed here; the airline’s own documents are the authority on exact wording.
- The Contract of Carriage defines an AI agent broadly, including tools acting under a person’s supervision or approval, and prohibits using one to make, modify or service tickets or to purchase products or services.
- United may cancel reservations made through AI agents. For violations it reserves remedies that include invalidating tickets, deleting MileagePlus miles or benefits, revoking elite status, terminating program membership and legal action.
- The website terms require prior written permission for automated-agent access and bar using United fare, schedule and pricing data to train or develop AI models.
- AI-assisted research and planning remains allowed where the tool does not access united.com or the app. Bookings made through third-party agents before 11 November 2026 will not be cancelled, and customers who shared MileagePlus credentials with an agent are advised to change their passwords.
- United says it does not yet work with any third-party AI agents and wants standardized, secure integrations with privacy, security and accountability protections before allowing direct agent access.
Industry context
CNBC places the move among other platform decisions on agents: Amazon has blocked Meta’s AI agent, Walmart has partnered with it, and Expedia and Booking are working with OpenAI. Skift reports, citing The Wall Street Journal, that United’s chief executive Scott Kirby said “I don’t want to create another middleman.” Different operators are making different choices, so this is one precedent, not a settled norm.
What it may mean for researchers and research offices
The following is interpretation, not reporting. The sources describe United’s policy only; they do not mention universities or researchers.
- Travel booking. Research offices and travel managers who pilot AI booking assistants for staff travel should check whether the assistant would act on a carrier’s site or app on the traveler’s behalf, and whether that is permitted under the carrier’s terms. Sharing airline account logins with a third-party tool is the specific practice United warns against.
- Agent access to commercial sites. Researchers building or testing web-browsing agents should read the target site’s terms on automated access. United’s terms, as reported, also restrict using its pricing data for AI training, a reminder that terms can address data reuse as well as access.
- Institutional AI policy. Acceptable-use and procurement policies for AI tools may need to address agents that transact or hold credentials, an area that research AI-use disclosure rules do not obviously cover.
What to watch
United has said it will update its Digital Trust Center and revise its booking, ticketing and distribution policies, and that it intends to work toward standardized integrations. Whether other carriers adopt similar terms, and whether authorized agent channels emerge, will determine how far this precedent extends.
