PARAS MADAN
All writing

Latest in AI

United Airlines AI Agent Ban: What You Can Still Do

United’s new restrictions separate travel planning from account access, and the distinction matters before an assistant touches an existing booking.

United announced restrictions on unauthorized third-party AI agents on November 11, covering access through its own platforms and through travel agencies and aggregators. You can still use AI for general trip planning, but giving an assistant permission yourself does not make it an authorized United booking tool.

That distinction is easy to miss if an agent successfully booked a flight last week. Technical access, your consent and the airline’s permission are three different things. A tool reaching the checkout page does not settle the other two.

What United’s AI restrictions cover

United’s announcement says it is updating booking, ticketing and distribution policies. The stated concerns include exposing account information, unintended purchases, account changes and use of MileagePlus miles. It also points to safety acknowledgments during check-in as actions that require human attention.

The more useful operational detail is in United’s Digital Trust Center FAQ. An unauthorized tool can be an AI agent, bot, browser extension or browser feature that searches, books, buys, manages or collects information on United’s website or app without the airline’s permission. This reaches further than the final payment click.

As checked for this article, United says it does not yet work with any third-party AI agents. It also explicitly says that a customer granting an assistant access does not mean United will permit that assistant to transact. Assistive technology for customers with disabilities is not affected.

Stopping an agent just before payment is not enough if the earlier steps already involve unauthorized access to United. A product team needs to decide where it must hand control back before it starts that workflow.

A travel-planning workflow that keeps the boundary clear

Keep AI assistance on the planning side. Ask it to compare destination tradeoffs, explain general fare terminology or turn your own requirements into a checklist. United recommends sharing general information rather than private account or booking details, and says AI-generated search text should be reviewed and searched by the traveler on its website or app.

For example, a traveler considering a January Caribbean trip could ask for destinations with relatively quiet beaches, likely weather considerations and questions to check before choosing a fare. That produces a useful research plan without handing over a MileagePlus login or a flight confirmation number. Actual schedules, current prices and fare conditions still need checking in the booking channel.

Then open United yourself and carry out the search, purchase and any later changes. Keep a separate checklist of departure and arrival airports, local dates, baggage, seat selection and cancellation conditions. The point of the checklist is to reduce mistakes during the handoff, not to give the AI another way to operate the account.

For developers, this is a reason to build a deliberate stop state into travel products. Return the planning output and explain which action the traveler must complete. Do not quietly send the same transaction through a different website after the airline route fails: United expressly includes indirect access through agencies and aggregators.

What if an AI agent already booked your flight?

United’s FAQ says agent bookings made before November 11, 2026 will not be canceled under this announcement. It recommends checking that recent travel has been booked and ticketed correctly. This is a date-specific assurance, not a promise covering future agent-made reservations.

Review the trip directly with United rather than asking the same agent to investigate inside your account. Check that the itinerary matches what you intended and that you have a ticketed booking, not just a proposed itinerary or an assistant’s success message. If something is wrong, use the airline’s support channels before making another purchase that could create a duplicate.

The FAQ separately recommends changing your password immediately if you previously shared MileagePlus login information with a third-party AI agent. If you suspect unauthorized access or purchases, follow United’s account-security guidance. A correct reservation does not by itself show that the account access around it was safe.

Does using a travel agency avoid the restriction?

No. United says agencies and booking platforms cannot use third-party AI agents to search for, book or manage United travel for customers on either direct or indirect channels without permission. Agencies can use their own third-party AI tools only with United’s permission.

That does not mean every travel-agency booking is prohibited. It means the agency channel is not an automatic exception for unauthorized agent activity. If a vendor claims its integration is approved, ask what United has authorized rather than treating the existence of a booking API as proof.

Reuters’ reporting places the announcement within the growing pushback against personal agents. For a traveler or product team, however, the specific airline rules are more useful than a general prediction about whether agents will win that argument.

Why this changes the product requirement

An agent that can complete a booking still needs a supported way to do it. United says it wants standardized integrations with privacy, security, authorization and accountability protections. Those requirements introduce work that a better browser model alone cannot finish.

The practical lesson for builders is to separate planning quality from transaction coverage. Show which providers a product can actually work with, keep account access scoped to supported integrations and make human handoffs useful enough that the user can finish without reconstructing the whole task. A graceful stop is part of a reliable travel product, not a temporary embarrassment to hide.

I’m Paras. I work at the intersection of AI, engineering and distribution.

I help technical founders explain product boundaries and complex workflows clearly, so developers and customers understand what their products can actually do.

Book a 30-minute call