United bars AI agents from buying its flights: access becomes a bargaining chip

By El Ecosistema Startup (with reporting from The Verge) · November 11, 2026.

United Airlines will not allow personal AI assistants to buy tickets on its platform. According to The Verge, agents will be able to look up flights, schedules and fares, but not complete the transaction on the passenger's behalf.

The airline bases the decision on two arguments: exposure of sensitive data and possible violations of federal rules. According to the reporting, handing an agent payment details or login credentials could lead to unwanted purchases, account changes or use of MileagePlus miles. In addition, completing a booking through an agent could conflict with Department of Transportation (DOT) and Federal Aviation Administration (FAA) rules.

The most concrete example is check-in: only a person can declare that their luggage contains no explosives, and an agent cannot sign that declaration. United adds that it could revisit the decision once protections for travelers are in place.

CEO Scott Kirby was more blunt at an event, according to the Wall Street Journal and The Verge: "I don't want to create another intermediary." The company also said it does not yet see many people trying to book with agents.

**Not an isolated case.** According to the sources cited in the original piece, eBay banned "buy-for-me agents" in its user agreement. Amazon blocks outside agents entirely, and in September it blocked Muse, Meta's agent. Target, Chewy and Neiman Marcus impose partial restrictions, while Tapestry and Kohl's do not allow purchases to be completed. Delta does not yet let agents buy tickets either. On the other side, Shopify opened its catalog to agents and Southwest launched a ChatGPT plugin in October to search flights and fares.

The regulatory backdrop matters. According to Yahoo Finance, in October the Federal Trade Commission (FTC) asked United, Delta, JetBlue and six other airlines for information on how AI influences individual ticket pricing and the use of customer data.

**Real demand is still small.** Uber reported, according to Engadget, 500 Uber Eats orders and just four rides made by agents in a week with 320 million trips and deliveries. DoorDash puts orders from third-party agents at "several hundred" against 993 million in total for the quarter. The exception is Meta: Zuckerberg said more than 10 million people in the U.S. and Canada have set up personal agents, mainly for shopping.

**Our take.** United cites security, and part of that is genuine: a mistaken purchase with miles or a security declaration nobody signed are real problems. But Kirby's remark gives away the other motive. An agent buying on the customer's behalf stands between the airline and the passenger, diluting the brand, add-on sales and data. It is a defense of the business's most valuable asset: the direct relationship.

The thesis is that agentic commerce is not dead, but its bottleneck is not the model but permission. An agent's competitive edge will lie less in its autonomy than in its ability to prove identity, consent and traceability: spending limits, human confirmation for sensitive actions and auditable logs of what it did and why.

It also pays to be wary of noise in both directions. With four rides in a week, the market is niche today; but Meta's 10 million agent users, the company's own figure, suggest demand is growing. Companies are blocking before volume forces them to negotiate.

In the short term, this means friction: agents that search well but send you back to the website to pay, and a patchwork of bilateral deals that favors the big platforms. That is why how this is resolved matters. If access is granted through official channels and open identity standards, users get an assistant that genuinely saves them time. If every company builds its own wall, the agent will end up as one more layer of platform power.

In the long term, delegating tedious tasks such as travel, shopping and paperwork to software is part of the path toward freeing up human time. But we will get there sooner if responsibility and identity are resolved sooner, rather than blocked by reflex.