United blocks third-party AI agents from booking flights and MileagePlus accounts

Quick summary

United Airlines is blocking unauthorized third-party AI agents from booking flights, checking in passengers, or managing MileagePlus accounts under a policy announced November 11, 2026. The restriction covers chatbots, bots, scrapers, and AI-enabled browser extensions acting on United.com or the app, and it applies through travel agencies and aggregators as well.

Bookings made before November 11 will not be canceled, but United is placing the verification burden on travelers. It is the first formal boundary a major carrier has drawn around AI agents.

United Airlines will no longer let third-party AI agents touch its booking, check-in, or loyalty systems. The policy, announced November 11, 2026, blocks unauthorized automated tools — chatbots, bots, scrapers, and AI-enabled browser extensions — from acting on United.com, the United app, or through travel agencies and aggregators.

For travelers, the practical effect is a hard separation between assistance and action. An AI tool can still help you compare options. If it logs in, buys a ticket, changes a reservation, redeems MileagePlus miles, or checks you in, United can block it.

That distinction matters more than it sounds — the gap between an assistant that reads and one that acts is the gap between a search engine and a travel agent holding your credit card.

The rule applies to itineraries sold by the Chicago-based carrier worldwide, not just domestic US flights. It took effect immediately and is already written into United’s website terms and contract of carriage.

What United’s terms actually cover

United’s guidance defines an unauthorized third-party agent broadly. It covers AI assistants, bots, scrapers, browser extensions, and AI-enabled features that act autonomously or semi-autonomously on United’s website or app — a wider net than chatbots that independently buy a ticket.

The website terms prohibit automated agents from searching, booking, purchasing, managing, or extracting content from United.com or the app without prior written permission, and reserve the right to block or limit them. Fare-search and data-collection activity can therefore be restricted even when no ticket is purchased.

The contract of carriage goes further, defining an AI agent as software taking autonomous or semi-autonomous action to discover, search, book, purchase, ticket, service, or manage United products — including seats, upgrades, and partner products. Post-booking servicing and paid extras sit in scope, not just the initial reservation.

United’s compliance argument centers on check-in. The airline says travelers must acknowledge that checked baggage contains no prohibited items, such as explosives. An automated tool could complete that declaration without the traveler directly performing the required confirmation. United records this as its own risk interpretation — it does not claim federal regulators have separately ruled AI check-in unlawful.

Bookings made through a third-party AI agent before November 11, 2026 will not be canceled. United instead advises customers to confirm those trips were correctly booked and ticketed — an audit, not an automatic rebook.

That audit burden is the part travelers are most likely to underestimate. United is not fixing agent-made reservations for you; it is handing you the receipt and asking you to check the math.

A permission model, not a blanket ban

United’s published material establishes a permission-based framework rather than a total prohibition. An agency or platform may use its own third-party AI tool only with United’s authorization — and the restriction reaches indirect distribution, so an online travel agency cannot simply move an unauthorized agent behind its own interface.

No directly verified Delta, American, or Southwest equivalent was identified. That absence is the real signal here. United has converted a general worry about AI intermediaries into website terms, distribution rules, and loyalty-account controls.

Carriers have spent a decade treating flight-search traffic as a cost center. Automated agents multiply the queries without adding a booking — and that arithmetic is what United is responding to.

Watch the distribution contracts, not the press release. If United starts writing AI-agent clauses into agency agreements, the restriction stops being a website rule and becomes an industry standard.

What to do before your next United flight

United’s restriction is live now, and the burden of checking agent-made bookings falls on you — here is the order that matters.

1. Audit existing reservations. Open any United trip created through an AI assistant at united.com/manage-reservations and confirm the ticket number, passenger details, itinerary, and paid extras are correct.
2. Revoke credentials. Remove any unauthorized AI tool’s access to your MileagePlus login and stored payment details.
3. Check in directly. Complete check-in from 24 hours before departure at united.com/checkin or in the United app, and verify route-specific deadlines, which vary by airport and destination.
4. Confirm the baggage declaration yourself. You must personally acknowledge that your checked bag holds no prohibited items — an automated tool cannot do this for you.

Watch: whether Delta, American, or Southwest publish comparable terms. United’s move is a template, and the next carrier to copy it will show how fast this spreads.

Questions? Answers.