If your product relies on an AI agent completing a purchase on a third-party site, United has just shown one way that plan can break. The airline will let agents display its flights but not finish the booking, which pushes agent teams in travel toward a handoff model where the human, or an approved integration, completes the sale.
What happened
United says it will not let personal AI assistants book tickets on its platform, according to The Verge, which cites reporting by The Wall Street Journal. The airline gave privacy and regulatory concerns as its reasons. Agents can still show users United flights, but they cannot complete the transaction for them.
United is concerned that agents could expose customer information or make purchases the customer did not intend. It also worries that agents could skirt federal rules on what airlines must share with customers, for example having them attest that their bags hold no explosives. A short Engadget summary describes the airline’s view as security risks plus possible conflict with DOT and FAA rules. We have only that summary, so the detail on those agencies is limited.
United says it has not yet seen many people try to book flights with agents. CEO Scott Kirby said at an event on Tuesday, as the Journal reported, “To be honest, I don’t want to create another middleman.” The company also left room to reconsider as agents improve, saying it wants to “establish protections for travelers first.”
Why it matters
Because United reports low demand, this suggests the block is a policy position taken before agent traffic arrives, not a reaction to a flood of it. Whether that gives early movers any leverage later is untested.
The regulatory argument is the part to watch. A booking flow is more than a payment form, and United’s stated worry is that an agent could bypass steps such as customer attestations. That is the airline’s position. The sources do not say whether regulators agree, or whether agents could meet such requirements through some design.
United is not alone. The Verge notes that eBay appeared to block agents from browsing and that several major banks have restricted them. Newer personal assistants such as Meta’s Muse and OpenAI’s Dots could see their usefulness limited if more businesses follow. This is one airline’s decision, so it does not show that agent booking fails in general.
What it means for you
If you build agent products, stop assuming that a user’s login or a scripted browser session equals permission. Audit every flow where your agent completes a transaction and mark which ones involve legal disclosures, identity checks or stored payment data. Those flows carry the most risk of being blocked.
Design for search, compare and prepare, then hand the final step to the user with the cart filled in. Budget engineering time for that handoff and for fallbacks when a site refuses automated access, because a hard failure mid-task will cost you user trust.
If you run a consumer site, decide your agent policy before traffic arrives. Define what agents may read, what they may change and which actions need a human. Check your terms of service and bot detection against that policy, and ask your fraud and compliance vendors how they classify agent sessions.
If you buy agent tools for travel or procurement, ask vendors which merchants they can actually transact with, and whether that relies on a sanctioned integration. Our AI Tool Radar tracks pricing, but booking capability claims need testing against real merchants. Platform openness raises a similar question in our piece on Siri AI opening to third-party developers.
What to watch
- Whether other airlines or travel sellers publish similar limits, or offer sanctioned agent access instead.
- The protections United says it needs before it reconsiders, and whether they take the form of an official API or authentication scheme.
- Any guidance from DOT or FAA on how required customer disclosures apply to automated purchasing.
- Whether assistant makers such as Meta and OpenAI respond with merchant partnerships. See more in our AI coverage.
