United Blocks Third-Party AI Agents From Its App and Website

Citing privacy, account-security, loyalty-point and regulatory concerns, United Airlines has moved to restrict third-party AI agents from booking on its platforms — the strongest supplier posture yet in the emerging AI-agent commerce debate.

Published: November 13, 2026 | Airlines & Technology

The News

United Airlines has moved to block third-party AI agents from booking on its app and website, citing concerns across privacy, account security, loyalty-point mechanics and regulatory compliance — making theCarrier one of the largest U.S. airlines to formally restrict the autonomous-agent booking path rather than just monitor it.

The move puts United at the opposite end of the spectrum from Southwest, which earlier this season launched a ChatGPT plugin for flight search — building a partnership with one AI ecosystem while another major airline walls them off. The divergence frames the industry’s coming strategic fork: build for agents, or restrict them.

United’s stated concerns map to real operational exposures:

• Account security. Agent-driven bookings introduce delegated authentication questions — where stored credentials or session tokens are handled by third-party agents, the airline’s fraud and account-takeover models face new attack surfaces.
• Loyalty-point mechanics. Mileage accrual, elite benefits and award-ticket rules are all built on one-member-one-account assumptions. Agents intermediating bookings blur the identity and policy-enforcement chains those mechanics depend on.
• Privacy. Travelers’ identity, payment and itinerary data passing through third-party agents raise data-handling questions airlines would rather not litigate by precedent.
• Regulatory. International bookings, fare-display rules and consumer-protection safeguards each raise compliance questions when the transaction counterparty is a machine.

The stance mirrors similar postures elsewhere in travel: hotel operators (led publicly by MCR’s Tyler Morse) have flagged autonomous re-shopping and unauthorized booking as revenue-integrity threats, and several supply-side platforms are exploring agent-blocking rather than agent-accommodating paths.

The policy vacuum remains the industry’s most unresolved 2026-2027 issue: no uniform standard yet exists for whether AI agents may book, how identity is verified, how loyalty credit flows, who bears liability in error cases and what data the agent retains.

What it means for hotel and travel businesses

For airline and hotel revenue teams: United’s move is a watch-and-learn precedent. Supplier blocking can be effective where booking flows are owned (app/website), but agents can still transact through GDS, OTA and metasearch layers. Airlines/hotels weighing agent policy should focus on the *transaction path*, not the *client type* — and should mappen which channels remain agent-accessible before assuming restrictions hold.

For distribution and loyalty leaders: Travel suppliers need published agent-policy frameworks now, before agent-driven intermediaries harden into established intermediaries. A formal policy (agent permitted with named authentication; loyalty credit rules; liability allocation) beats reaction-disguised-as-policy later.

For AI-booking startups: Scraping-first approaches now face explicit legal and policy risk from major suppliers. Vendors designing agent flows that respect supplier authentication, loyalty credit and rate rules will find a path; those relying on surfaces owners are now walling off will not.

For corporate-travel buyers: A block on third-party agents doesn’t prevent AI-assisted travel shopping internally — it changes where the transaction completes. Travel managers should brief travelers on approved booking paths and clarify expenses/loyalty-credit handling when assistants assist discovery but don’t complete the transaction.

Key numbers

• Policy: United blocks third-party AI agents from booking on its app and website
• Stated concerns: privacy, account security, loyalty-point mechanics, regulatory compliance
• Strategic contrast: Southwest launched a ChatGPT flight-search plugin earlier this season
• Industry context: no uniform AI-agent booking standard yet; MCR (hotels) also pushing agent restrictions