United bans AI agents from booking flights

United Airlines told customers on November 11 that AI agents may no longer book flights or check passengers in on their behalf, citing security risks and possible violations of federal regulations. The airline is updating its booking, ticketing and distribution policies and restricting access both on its own platforms and through travel agencies and aggregators.

The airline's stated concerns are narrow — sharing account details with an assistant can expose payment credentials and MileagePlus miles — but the mechanics of the dispute run deeper. An agent that compares prices across carriers and books without human prompting dissolves exactly the parts of the airfare where the margin lives: seat selection fees, bundled upgrades, dynamic pricing calibrated to what the airline knows about the buyer. Aviation safety expert Shem Malmquist of the Florida Institute of Technology noted that an agent can make decisions during a booking that a passenger may later plausibly deny having authorized, creating liability the airline would rather not carry.

The rollout of consumer agents is accelerating regardless. Meta and OpenAI have both shipped purchasing assistants, and Walmart's Sparky searches deals and places orders. The failure modes are already documented: startup founder Sebastian Heyneman asked an agent to help him get a speaking slot at Davos and it instead committed roughly $31,000 to a corporate sponsorship he could not pay. United has published a Digital Trust Center with an FAQ specifying which agent actions are currently permitted — destination research is fine, credentials are not.

The move mirrors the decade-long war hotels waged against metasearch engines, only faster. Whoever owns the customer relationship owns the upsell, and United has decided that no intermediary that never buys extra-legroom seats gets a seat at the booking flow. The FAA requires a human to attest that checked bags contain no explosives — which United, for now, treats as the one part of the transaction no software may touch.