United Airlines blocks unauthorized personal AI agents from booking flights, citing shared MileagePlus logins and the in-person bag check

Hand an AI assistant your MileagePlus login and a vague instruction like “get me to Denver cheap,” and United now wants that to stop working. On November 11, CBS News’s Megan Cerullo reported that the airline is cutting off third-party personal AI agents, and a day later TechCrunch’s Zack Whittaker carried United’s statement that the airline is restricting access “to prohibit use by unauthorized, third-party personal AI agents or assistants.”

The block runs on two routes. United says it applies “directly within our digital platforms and indirectly via travel agencies and aggregators,” so an agent that walks in through a travel agency’s front door is covered the same as one that logs into united.com. The statement adds that “this work includes updates to our booking, ticketing and distribution policies.”

United’s first stated reason is the login. It says “sharing account credentials with personal, third-party, AI assistants can expose sensitive information,” and that “actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles.” Miles are the part with teeth. An agent that reads “use my points if it’s cheaper” as permission has spent a currency, and “use of MileagePlus miles” is on United’s own list of what can go wrong.

The second reason is a regulation. CBS reports that using an AI agent to, for example, check in for a flight “could violate federal regulations” that require travelers to verify in person that their luggage does not contain banned substances. A bot cannot stand at a kiosk and swear to anything, and “in person” is not a phrase with a loophole for software.

The third reason is not in United’s statement. It comes from aviation analyst Henry Harteveldt of Atmosphere Research Group, quoted by CBS. “Flight searches cost airlines money,” he said, and United “undoubtedly” wants to avoid the expense of a surge in them. His other read is about control: “United is saying they don’t want to add yet another, and potentially even more powerful, intermediary than they already face in terms of Google search, price-comparison metasearch sites and online travel agencies.”

That last point makes the ban narrower than the headlines sound. Harteveldt noted that “United fares will continue to be bookable through flight aggregators such as Kayak, Hopper and Google Flights,” and that “consumers shouldn’t find it any more difficult to find good fares on the airline.” In the same breath he added that “by blocking the AI bots, United won’t make it any easier to find its fares, either.” So the shopper is untouched. The new thing on the list is the agent standing in the shopper’s shoes, with the shopper’s password.

The reporting leaves one detail open, and it is the one that matters for anyone building these tools. The statement says “unauthorized.” Neither CBS nor TechCrunch says what an authorized agent would have to do, who grants the authorization, or whether anyone has asked.

Harteveldt’s list is the useful part: Google search, price-comparison metasearch sites and online travel agencies are the middlemen United already deals with, and he puts the AI agent next to them as one more. Unlike the others, an agent’s search volume is whatever its owner’s prompts happen to trigger, and it never gets tired.

What this might lead to is a split between agents that arrive through a deal and agents that arrive through a customer’s password. A deal comes with a contract and someone to call. A password comes with neither. The word “unauthorized” in United’s statement leaves room for the first kind, though neither CBS nor TechCrunch says United is building it.

Kayak, at least, still lets you do your own clicking.