United Will Let AI Agents Read Its Fares. It Will Not Let Them Buy.
On 11 November 2026, United Airlines became the first major US carrier to write a ban on AI agents into the contract every passenger accepts. Personal AI assistants can still find a United flight, compare it and show the price. They can no longer buy it, change it or add a seat or upgrade to it.
That split is the story. United has decided that machines may read its inventory but may not transact on it. It is the clearest statement yet, from a large consumer brand, of a question publishers have been living with for two years: what happens when software reads your product on someone else's behalf, and who gets paid when it does?
What did United actually change?
Two documents changed on the same day. United's newsroom release says the airline is restricting access for unauthorized, third-party personal AI agents or assistants, both on its own app and website and indirectly through travel agencies and aggregators (named-party statement, United).
The second change is in the Contract of Carriage, headed "revised November 11, 2026". According to PPC Land's reading of the text, a new Rule 6.J.6 adds the use of AI agents to make, modify or service a ticket, or to buy any product, to the list of prohibited ticketing practices. It sits alongside hidden-city and throwaway ticketing. A change to Rule 5.H adds reservations made or serviced by AI agents to the bookings United may cancel without notice (reported, PPC Land).
Bookings made by agents before 11 November will be honoured, according to several outlets (reported, Technology.org and others). United also says it has no current partnerships with third-party AI agents (reported, Technology.org).
How does United define an AI agent?
Broadly. The new definition covers any software that acts autonomously or semi-autonomously to discover, search, book, purchase or manage United products, and it applies "whether or not Passenger or another individual supervises or approves" what the software does (contract text, via PPC Land).
That clause matters. The usual reassurance about agentic commerce is the human in the loop: the agent proposes, the person confirms. United's contract removes that defence. A traveller who watches every screen and taps "pay" is still using an AI agent.
The definition names three categories: assistants built into social, messaging and search platforms; AI-enabled browsers and standalone agents; and AI tools reached through a travel agency's app (reported, PPC Land). That reaches the booking features Google, OpenAI and Meta have all been building into their products.
Why is United doing this?
The stated reasons are security and regulation. United says agents holding a customer's credentials can expose sensitive data and trigger unintended purchases, account changes or use of MileagePlus miles. It adds that some steps, such as confirming at check-in that bags hold no banned items, require a human acknowledgement under FAA and DOT rules (named-party statement, United).
The commercial reason was put more bluntly. Chief executive Scott Kirby said he did not want to create another middleman (named-party remark, reported by The Wall Street Journal).
United is not alone. Its release points to similar moves in banking and retail. Amazon sued Perplexity over its Comet shopping agent in November 2025 and won a preliminary injunction in March 2026, then cut Meta's Muse agent off from buying on Amazon.com in September. Walmart took the opposite route in October, publishing terms that let compliant agents buy within limits the customer sets, such as $50 or $100 (reported, PPC Land).
Three companies, three levers: litigation, a technical block, a gateway with conditions. United chose the contract, with cancellation and loyalty penalties behind it.
Why does the read stay open while the sale closes?
Because United needs the read and fears the transaction.
If an AI assistant cannot see United's fares, United disappears from the answer. A traveller asking for the cheapest flight to Denver gets someone else's flight. So discovery stays open. The purchase is where the customer relationship, the loyalty data and the margin live, so the purchase is where United draws the line.
Consumers, for now, are on the same side of that line. A HUMAN Security survey found 54% of Americans comfortable with AI trip planning but only 12% with autonomous booking (vendor-stated, HUMAN Security, via PPC Land). In-chat checkout has also struggled: Walmart said in March 2026 that checkout inside ChatGPT converted three times lower than click-out links (named-party figure, Walmart, via PPC Land).
What does it mean for publishers?
Publishers do not have United's choice. They have nothing to transact at the end of the read. The read is the product.
When a Live Search Agent (a bot dispatched in real time when someone asks ChatGPT, Perplexity, Claude or Google a question) fetches an article, it typically does not run JavaScript. No analytics fire, no ad tags load, no auction runs. The publisher served the page and earned nothing. One in fifty publisher visitors is now an AI bot (reported, OPA Europe and Rossel, January 2026), and personal AI agent traffic grew fifteenfold by 2025 (reported, Cloudflare).
United's move shows how large brands will respond: welcome the read where it drives demand, gate the transaction where the value is. Publishers cannot gate a transaction that does not exist, and blocking the read simply hands the answer to whoever stays open. The lever left to them is the read itself.
What does it mean for advertisers and brands?
Two things.
First, presence in the answer and the right to close the sale are now separate questions. United wants to be in the AI answer and wants the click to come home. Brands that block agents entirely risk vanishing from the moment of decision; brands that let agents do everything risk becoming a supplier to someone else's storefront.
Second, the hand-off becomes the conversion point. If an agent can show a fare but not buy it, the sale still happens on a page a human controls, after a click, where existing tracking works. Visibility in the answer is what earns that click. For travel, retail and financial brands, being named in the AI answer is now the top of a funnel they still own.
Can United enforce it?
Not cleanly. The contract describes no detection method (reported, PPC Land). A booking completed by an agent on a travel agency's site may simply look like a travel agency booking, although United says its systems can identify booking sources (reported, InsideFlyer, via PPC Land). Arkose Labs found 97.7% of legitimate AI agent sessions carried no verified identity (vendor-stated, Arkose Labs, via PPC Land).
That is the same detection gap publishers face. Most media sites cannot see the agents reading them today: 68% fail to detect basic bots (reported, OPA Europe and Rossel, January 2026). A rule you cannot see being broken is a policy, not a control.
the blankspace read United has just told the market what an AI read is worth when you own the transaction behind it: worth allowing, but only if the customer comes home to buy. Publishers do not have a checkout to come home to. Their page is the whole product, and an agent that reads it and leaves has already consumed it. That is why blocking is the wrong lesson to take from United. The right one is that the read is a commercial event in its own right. Airlines can afford to give it away. Publishers cannot, so the read itself has to be where the money is made.
Key figures
| Figure | Value | Provenance |
|---|---|---|
| Date of United's Contract of Carriage revision | 11 November 2026 | Named-party (United contract and release) |
| New prohibited practice | Rule 6.J.6: AI agents may not make, modify or service a ticket or buy any product | Reported (PPC Land reading of contract text) |
| Cancellation right | Rule 5.H: AI agent reservations may be cancelled without notice | Reported (PPC Land) |
| Human approval exemption | None; applies even if a passenger supervises or approves | Reported (PPC Land, contract text) |
| Current United partnerships with third-party AI agents | None | Reported (Technology.org) |
| Americans comfortable with AI trip planning vs autonomous booking | 54% vs 12% | Vendor-stated (HUMAN Security survey, via PPC Land) |
| In-chat ChatGPT checkout vs click-out conversion at Walmart | About three times lower | Named-party figure (Walmart, March 2026, via PPC Land) |
| Walmart agent spending limits | Customer-set, e.g. $50 or $100 | Reported (PPC Land, 21 October 2026) |
| Legitimate AI agent sessions with no verified ID | 97.7% | Vendor-stated (Arkose Labs, via PPC Land) |
| Publisher visitors that are AI bots | 1 in 50 | Reported (OPA Europe and Rossel, January 2026) |
| Media sites failing to detect basic bots | 68% | Reported (OPA Europe and Rossel, January 2026) |
| Growth in personal AI agent traffic | 15x by 2025 | Reported (Cloudflare) |
Primary source, opened and verified: United Restricts Access for Third-Party AI Agents, United newsroom, 11 November 2026