Coding is Love
News 3 min read

United Airlines blocks third-party AI agents from booking flights

United Airlines said on November 11, 2026 that it will block unauthorized third-party AI agents and personal AI assistants from booking flights and managing reservations for its customers. The airline cites the risk of customers sharing their account logins with AI tools and the chance that automated actions break US aviation rules. For developers building AI agents that act on the web for their users, it is one of the clearest refusals yet from a large consumer business, and it covers access through travel agencies and aggregators too, according to United’s statement.

What’s new

In the statement, titled “United Restricts Access for Third-Party AI Agents”, United says it is taking steps to restrict access “directly within our digital platforms and indirectly via travel agencies and aggregators” to stop use by “unauthorized, third-party personal AI agents or assistants”. The airline says this includes updates to its booking, ticketing and distribution policies.

United gives three reasons:

  • Shared logins: giving account credentials to a personal AI assistant can expose sensitive information, United says.
  • Unintended actions: an agent acting on a customer’s account may make purchases, change the account or spend MileagePlus miles the customer did not mean to.
  • Federal rules: automated actions could violate FAA and DOT regulations. United’s example is check-in, which requires a person to confirm their bags hold no banned substances such as explosives.

The airline says it will update its Digital Trust Center pages to explain what the restrictions mean for customers, how to protect their accounts and where to get help if an agent takes an action they did not intend. The statement does not say when the blocking starts, how United will tell an agent apart from a person, or whether any agents will be authorized.

United also points to “corporate leaders in the banking and retail industries” who have taken similar steps. TechCrunch notes that Bank of America recently urged its customers not to share their passwords with AI assistants.

What it means for developers

If you build a browser or computer-use agent that logs into accounts on a user’s behalf, United’s sites and apps should now be treated as off-limits for bookings, changes and check-in. An agent that relies on a user’s shared password is exactly what the airline names as the problem, so expect logins from such tools to be blocked and design your agent to hand the task back to the person when it reaches that step.

Searching for fares is a separate question. Aviation analyst Henry Harteveldt of Atmosphere Research Group told CBS News that United fares will stay bookable through aggregators such as Kayak, Hopper and Google Flights. He also suggested United wants to avoid “yet another, and potentially even more powerful, intermediary” between it and its customers, and the cost of a surge in AI bot flight searches.

Not every airline is taking this line. CBS News reports that Southwest has made its flight inventory viewable to ChatGPT users. For agent builders, the pattern is becoming clear: companies that want agents in their booking flow are opening official integrations, while those that don’t are closing the door on agents that drive a logged-in browser. Integrations a company publishes itself, like the Business Agents OpenAI is testing in ChatGPT, are the safer path.

How it compares

Company Approach to AI agents
United Airlines Blocks unauthorized third-party personal AI agents, directly and through travel agencies and aggregators
Southwest Airlines Flight inventory viewable to ChatGPT users, per CBS News
Bank of America Asks customers not to share banking passwords with AI assistants, per TechCrunch

Sources