Opening an AI assistant and typing “book this flight” can feel like the last decision in a purchase. You have chosen the trip and given your permission. United’s new restrictions expose another decision that belongs to the airline: whether that assistant is allowed to act inside its systems.
On November 11, United announced restrictions on unauthorized third-party personal AI agents, covering access through its digital platforms and through travel agencies and aggregators. CBS News reported the booking restrictions. The airline says it is updating its booking, ticketing, and distribution policies.
For travelers, the useful lesson reaches beyond one airline. An assistant’s promise to handle a purchase needs to cover the whole arrangement: what you want, what the software may do, and whether the seller permits it to do those things.
Three questions behind one instruction
Start with the request itself. “Find a flight” leaves different decisions open from “buy this flight for this price.” A useful instruction identifies the route, dates, acceptable connections, fare conditions, and spending limit. It also says when the assistant must stop and return a decision to you.
Then consider the authority you give the software. Can it compare information, enter passenger details, spend money, use loyalty miles, or alter an existing reservation? Those actions have different consequences. A confirmation before payment is valuable, but it tells you only that a particular action received your approval.
The third question is whether the service accepts that tool. In United’s case, the airline is drawing its own boundary around third-party access. PhocusWire reports that United’s customer guidance explicitly distinguishes a consumer giving an agent permission from United allowing that agent to transact.
Keeping those questions separate makes the limitation easier to understand. A carefully specified task can still reach a supplier that does not authorize the software carrying it out. Clicking an approval button cannot resolve that disagreement by itself.
A handoff at checkout may be too late
It would be convenient to reduce the rule to a simple division: let the assistant search, then take over to pay. The reported scope requires more care.
Business Travel News reports that United’s email to business customers says agencies cannot supply United content to personal AI agents for discovery, search, booking, ticketing, or servicing. The same report says AI agents wholly owned, managed, and controlled by an accredited agency require specific permission from United to use its content.
That makes the route information travels relevant, too. An assistant reaching an airline through an intermediary does not automatically escape the airline’s restrictions. Before relying on an advertised travel feature, ask which service will carry out the work and whether that particular integration is authorized for the actions you need.
The ticket is only the beginning
United cites account security as a reason for its decision. It warns that sharing credentials with personal AI assistants can expose sensitive information and lead to unwanted purchases, account changes, or use of MileagePlus miles. It also cites possible FAA and DOT compliance problems, using human acknowledgment about prohibited baggage contents at check-in as an example.
That check-in example points to a useful distinction in the traveler’s own planning. Buying a ticket, changing it, and completing a later acknowledgment are separate tasks. Permission for one should prompt a fresh question about the next. Before delegating, establish where the assistant stops and which decisions or declarations come back to you.
The practical test for a travel assistant is therefore more specific than whether it can navigate a booking page. Can it explain its permitted role, show you the consequential choices, and hand back control at a clear point? When those answers are missing, keep the task small. Saving a few clicks is useful only if you still understand who is acting and what they are allowed to do.