United Airlines restricted unauthorized third-party AI agents from searching, booking, and managing reservations on its digital channels on November 11, 2026, according to United's help center policy and CBS News reporting. The move is the latest permission wall in agentic commerce, the same day OpenAI showcased airline partnerships and a day after eBay tightened third-party shopping agents.
TL;DR
| Topic | United's Nov 11, 2026 stance |
|---|---|
| Blocked | Unauthorized AI agents/bots/extensions that search, book, buy, or manage United travel for you |
| Allowed | AI for research and inspiration that does not access united.com or the United app |
| Credentials | United warns against sharing MileagePlus logins or payment details with personal assistants |
| Prior bookings | Agent bookings before Nov 11 are not auto-canceled (per United help text) |
| Agencies | Travel sellers cannot use third-party AI agents on United without United permission |
| Assistive tech | Accessibility tools for customers with disabilities are not in scope |
What United published
United's Digital Trust Center page "Unauthorized third-party AI agents or assistants" frames the issue as delegated authority:
- Third-party agents can act on your behalf, including touching MileagePlus accounts, booking trips, and buying add-ons.
- Granting that access can expose personal data or produce unintended purchases, account changes, or mile redemptions.
United says it sees opportunities in AI, but wants standardized, secure integrations with privacy, security, authorization, and accountability before agents transact directly.
The policy applies directly on United platforms and indirectly through travel agencies and aggregators. United is updating booking, ticketing, and distribution rules to match.
CBS News: regulatory and fraud framing
CBS News on November 11, 2026 adds airline executive language beyond the help page:
- Sharing account credentials with personal AI assistants can expose payment data and enable unintended spending or mile usage.
- Automated check-in may conflict with federal rules requiring travelers to personally attest that luggage excludes prohibited items such as explosives.
United told CBS it will update the Digital Trust Center so customers understand restrictions, account protection, and remediation if an agent acts unexpectedly.
Industry split: block vs partner
The same news cycle highlights opposite strategies:
| Airline posture | Example (Nov 2026) |
|---|---|
| Partner APIs | Singapore Airlines + OpenAI flight recommender metrics |
| Hard walls | United blocking consumer-delegated bots |
| Selective retail limits | eBay on Muse browsing |
| Metasearch still on | Analyst quotes to CBS that Kayak, Hopper, Google Flights remain fare surfaces |
Aviation analyst Henry Harteveldt told CBS United may want to avoid another powerful intermediary atop existing metasearch and OTAs, and that AI flight searches cost airlines money even when they do not convert.
Quartz's summary adds a operational detail attributed to The Wall Street Journal: United sees little booking volume from AI agents so far, and back-end systems can distinguish human, conventional agency, and automated assistant reservations.
What developers on Hacker News asked
The Hacker News thread on the WSJ link surfaced predictable builder questions:
- AnotherGoodName argued AI makes fare monitoring trivial and called the ban price-gouging protection, doubting enforcement will stick.
- malshe asked how United would detect an agent versus a human, pointing to click-pattern heuristics as the likely answer.
- ChrisArchitect linked United's official communications hub, underscoring that primary policy text lives on united.com rather than the WSJ paywall.
Treat HN comments as hypothesis, not confirmed United engineering detail.
What personal travel agents can still do
United draws a bright line:
Allowed: AI that suggests destinations, compares public fares you paste in, or drafts itineraries without logging into United systems.
Blocked: Any tool that searches, books, buys, manages, or collects United-specific data through united.com or the app without United authorization.
United also tells customers not to give agents confirmation numbers, MileagePlus credentials, or secrets you would not want remembered or leaked.
Implications for agent builders
1. Credentials are the tripwire
Travel agents tempt users to hand over passwords for convenience. United's policy treats that as out of bounds. Architectures should use official OAuth or partner keys where airlines offer them, and human confirmation for payment steps otherwise.
Our ChatGPT Business agents hub post shows how brands want verified integrations; United is the inverse: no integration unless approved.
2. Check-in and baggage attestation
If your agent automates check-in, United's regulatory argument is a reminder that high-stakes attestations may require human clicks even when the UI is scriptable. Similar themes appear in Coinbase agent trading limits and American Express workforce agent policy.
3. Distribution law still matters
Agencies and aggregators face the same ban on unauthorized third-party AI layers. If you sell B2B travel automation, United's line pushes you toward explicit permission rather than headless scraping.
4. Detection arms race
If United (and peers) classify traffic by behavioral signals, agents that replay human pacing may still violate ToS even when they pass heuristics. Legal risk remains even when technical detection fails.
Contrast with OpenAI's airline bets
On November 11, 2026 explainx.ai also published OpenAI at Singapore Airlines, where Jarvis APIs and Kris assistants sit inside a carrier partnership.
United's policy does not ban airlines from using AI; it bans unvetted consumer agents from impersonating the traveler on United's stack.
For a wider lens on closed web dynamics, see agent teams and platform doors and Google's Spirit data auction context.
What travelers should do
- Audit trips booked via agents since October 2026; confirm ticket numbers and seat assignments in United's app directly.
- Rotate passwords if you shared MileagePlus credentials with any assistant.
- Use AI for planning, then book yourself on united.com or through a known OTA until United ships approved agent integrations.
- Watch United's Digital Trust Center for a partner program akin to Shopify's agent catalog opening debate.
What this means for the agentic commerce thesis
United's step does not kill travel AI; it shifts value to sanctioned APIs, human-in-the-loop checkout, and metasearch discovery. The November 2026 pattern across retail and airlines:
- Platforms own the transaction layer.
- Models compete on planning quality, not on stealth logins.
Builders who ignored ToS in demos should update risk sections in pitch decks the same week Herdr terminal agents trend on GitHub: permission is now part of the stack diagram.
How United tells customers to spot unauthorized agents
United's help text offers practical heuristics travelers can use without reading WSJ:
- If a browser extension, bot, or assistant searches united.com or the app for you, and United has not approved that vendor, it is unauthorized.
- Assistive technology for disabilities stays outside the restriction—United explicitly carves out accessibility tooling.
- United says giving an agent sensitive details (confirmation numbers, MileagePlus credentials) is unsafe even when the agent is only "planning."
Those bullets matter for MCP shopping demos that replay logged-in sessions. They are the airline version of GitHub's LLM contribution policy debate: platforms are writing who may automate their surfaces.
Procurement and legal teams: what changes in contracts
B2B travel sellers should expect distribution policy addenda referencing third-party AI. United's line that agencies may use AI only with permission pushes liability onto aggregators that resell automation layers.
If your startup sells "book any flight" agents, your DPA and terms must mention:
- Credential storage prohibitions
- Human confirmation on ticket purchase
- Audit logs when a user delegates seat changes
Compare Trovata treasury agents on Bedrock, where regulated buyers demanded traceability before agents moved money. Airlines are asking for the same on miles and manifests.
Technical detection: what United has not published
United told CBS it can distinguish human, agency, and automated assistant bookings in back-end systems, but it has not published feature lists or API signals developers could rely on. That opacity is normal in fraud ops, but it means integrators should assume behavioral scoring and device reputation, not a simple User-Agent block.
HN commenter malshe guessed click-pattern analysis; United did not confirm that in the sources we cite.
Do not build evasion guides. Do build compliant adapters that stop at fare discovery unless you hold a signed partner agreement.
Timeline: agentic travel in November 2026
| Date | Event |
|---|---|
| Nov 10 | eBay selective agent blocks on browsing agents |
| Nov 11 | United booking ban for unauthorized agents |
| Nov 11 | Singapore Airlines + OpenAI partnership metrics |
| Ongoing | China Singles Day shopping agents burn tokens at retail scale |
The table shows travel and retail diverging: some merchants open catalogs to agents, others close checkout.
FAQs for your own product docs
If you ship a travel plugin, steal the structure of United's FAQ (not the legal text):
- What can my agent still do? Research, compare public fares, draft itineraries.
- What is forbidden? Credential login, automated check-in, mile transfers without explicit taps.
- What happens to past agent bookings? United says pre-Nov 11 agent bookings stand, but verify ticketing.
- Where is the official policy? United Digital Trust Center, not press summaries alone.
Related reading
- OpenAI at Singapore Airlines: Kris and Jarvis
- eBay blocks third-party AI agents
- Agent teams and the closing web
- ChatGPT Business verified brand agents
- AWS AgentCore payments reference design
- Google Gemini Decision 1 for routing
- American Express workforce agent rollout
Sources: United Digital Trust Center policy · CBS News (Nov 11, 2026) · Quartz summary