Leave the Bot at Home: United Restricts Third-Party AI Agents

If you have been letting an AI assistant into your MileagePlus account to shop for flights, spend miles or check you in, United wants that to stop. On November 11 the airline said it is "taking steps to restrict access" both "directly within our digital platforms" and "indirectly via travel agencies and aggregators." The stated aim is "to prohibit use by unauthorized, third-party personal AI agents or assistants." United says the work includes updates to its booking, ticketing and distribution policies.

The airline gives three reasons. The first is security: "sharing account credentials with personal, third-party, AI assistants can expose sensitive information." The second is control: "actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles." The third is regulatory. United says these automated actions "have the potential to violate FAA and DOT regulations," and offers a concrete example: "flight check-in requires human acknowledgment that bags do not contain banned substances like explosives."

That check-in example is the most useful line in the release. The banned-substances acknowledgment is meant to come from the traveler, and our read is that an assistant clicking through it on your behalf is exactly the kind of automated action United is worried about. The miles point matters for anyone sitting on a large MileagePlus balance, too: a tool that can redeem miles for you can also redeem them by mistake.

The release gives no effective date. United says it will update its Digital Trust Center "so customers can better understand what these new restrictions mean for them," notes that companies in banking and retail have taken similar steps, and adds: "As personal AI assistants evolve, United will continue to evaluate how these tools interact with our services." Until those details are published, the safe course is the obvious one: book, check in and redeem miles yourself.