The airline cites cybersecurity and regulatory risk in restricting unauthorized AI agents from its booking and reservation systems.
TechCrunch reports that United Airlines is restricting AI agents from booking flights and managing reservations on its behalf, both directly on its own digital platforms and indirectly through travel agencies and aggregators. The airline says unauthorized third-party agents put users at risk: sharing account credentials with an AI assistant can expose sensitive information, and agent actions could lead to unintended purchases or improper use of MileagePlus miles.
United also points to regulatory concerns, including federal aviation rules that require a human to complete check-in and confirm that bags contain no banned substances. The move follows a similar warning from banks, including Bank of America, which recently urged customers not to share their passwords with AI assistants.
Why it matters: as agentic AI takes on more real-world tasks on a user's behalf, enterprises are discovering that shared credentials, not the models themselves, are the weak point, and governance of agent identity and access is becoming a board-level security question.