United bans AI agents from booking: no bot can swear your bag is clean
Your agent can show you a United flight. It can no longer buy it. United said Wednesday it will "restrict access, directly within our digital platforms and indirectly via travel agencies and aggregators, to prohibit use by unauthorized, third-party personal AI agents or assistants," per CBS News (https://www.cbsnews.com/news/united-airlines-bans-ai-agents-booking-flights/). The policy page is at https://www.united.com/en/us/fly/help-center/digital-trust-center/artificial-intelligence/third-party-ai-agents.html, and The Wall Street Journal broke it, with The Verge summarizing (https://www.theverge.com/ai-artificial-intelligence/1031623/united-unauthorized-ai-agents).
Two reasons are given, and only one is the usual. The usual one: handing account credentials to a personal assistant "can expose sensitive information," and the agent's actions "may result in unintended purchases, account changes, or use of MileagePlus miles." The interesting one is legal. Federal rules require passengers to attest to things themselves, such as that their bags contain no banned or explosive items, and an agent checking you in cannot make that statement on your behalf. That is a concrete, nameable step in a workflow that today has no agent-shaped answer. Not "bots are bad," but "the law wants a person to say this."
The business reason is louder in the quotes. CEO Scott Kirby, at an event on Tuesday per the Journal: "To be honest, I don't want to create another middleman." Analyst Henry Harteveldt of Atmosphere Research put it more bluntly to CBS: United already pays a toll to Google, metasearch and online travel agencies, and does not want "yet another, and potentially even more powerful" intermediary, plus bot searches cost airlines money. Southwest went the other way and made its inventory viewable to ChatGPT users. Kayak, Hopper and Google Flights are unaffected.
It lands one day after Adobe, OpenAI and Anthropic all opened their apps further to agents. The other side of that market is showing its hand: eBay appears to block agent browsing, several big banks restrict agents, and now a major airline draws the line exactly at the transaction. United says it may reconsider "as third-party AI agents advance." What would change its mind is the thing the agent stack still lacks: a way for a user to sign an attestation once, cryptographically, and let a delegated agent carry it. Until that exists, Meta's Muse and OpenAI's Dots can plan your trip but you still have to press buy.
← Back to all articles
Two reasons are given, and only one is the usual. The usual one: handing account credentials to a personal assistant "can expose sensitive information," and the agent's actions "may result in unintended purchases, account changes, or use of MileagePlus miles." The interesting one is legal. Federal rules require passengers to attest to things themselves, such as that their bags contain no banned or explosive items, and an agent checking you in cannot make that statement on your behalf. That is a concrete, nameable step in a workflow that today has no agent-shaped answer. Not "bots are bad," but "the law wants a person to say this."
The business reason is louder in the quotes. CEO Scott Kirby, at an event on Tuesday per the Journal: "To be honest, I don't want to create another middleman." Analyst Henry Harteveldt of Atmosphere Research put it more bluntly to CBS: United already pays a toll to Google, metasearch and online travel agencies, and does not want "yet another, and potentially even more powerful" intermediary, plus bot searches cost airlines money. Southwest went the other way and made its inventory viewable to ChatGPT users. Kayak, Hopper and Google Flights are unaffected.
It lands one day after Adobe, OpenAI and Anthropic all opened their apps further to agents. The other side of that market is showing its hand: eBay appears to block agent browsing, several big banks restrict agents, and now a major airline draws the line exactly at the transaction. United says it may reconsider "as third-party AI agents advance." What would change its mind is the thing the agent stack still lacks: a way for a user to sign an attestation once, cryptographically, and let a delegated agent carry it. Until that exists, Meta's Muse and OpenAI's Dots can plan your trip but you still have to press buy.
Comments