Is Delta blocking AI agents?

Delta told TechCrunch that it does not currently have a partnership or integration that enables a third-party AI agent to shop for or book Delta flights on a customer's behalf on its digital platforms, and that it is taking steps to protect customers from unauthorized automated activity. It added that it continues to evaluate how external AI agents could enhance the way customers engage with Delta.

Which other companies are restricting agents?

State of AI reported on Oct. 18, 2026 that Delta, JPMorgan Chase, Charles Schwab, and Yelp have confirmed restrictions, and that Amazon has blocked Meta's Muse agent since Sept. 20. Users have also reported blocks elsewhere that the companies have not confirmed.

Which agents still get through?

Per State of AI, agents that come in through partnerships, paid licenses, APIs, or a declared identity are faring better than agents that drive a browser with the customer's password. In travel it points to Sabre, which says nearly 80 customers are piloting or using its MCP server in production.

Does this mean my agent cannot book flights?

No. It means the route matters. Flights booked through a flights API, a GDS or NDC connection, or an airline's own sanctioned agent channel are a different case from an agent clicking through an airline's website. Check each supplier's terms; this article is not legal advice.

Is this legal advice?

No. This is industry news for builders of AI travel products. Read each site's and supplier's terms for your own use case.

News

Delta and Amazon are turning away browser agents: travel extras need an API, not a login

By Loris Mazloum Published 19 October 2026

Personal AI agents were sold on booking trips. This month, more of the companies on the other end started saying no. On Oct. 18, 2026, State of AI reported that Delta, JPMorgan Chase, Charles Schwab, and Yelp have confirmed they restrict AI agents, and that Amazon has blocked Meta’s Muse agent since Sept. 20. The pattern it describes is simple: agents that arrive through a partnership, a license, an API, or a declared identity still get through; agents driving a browser with the customer’s password get stopped, often halfway through a task.

What the airlines said

Delta. In a statement to TechCrunch, Delta’s general manager of global communications said Delta “does not currently have a partnership or integration that enables a third-party AI agent to shop for or book Delta flights on a customer’s behalf on our digital platforms,” and that the company is protecting customers from unauthorized automated activity. Delta also said it is still evaluating how external AI agents could improve the way customers engage with it.
United. Asked the same question, United pointed TechCrunch to its terms of use, which bar robots, spiders, or other automatic devices on its site “without United’s prior written permission.”
Others. TechCrunch reported user complaints about various airlines rejecting agent requests; those were not all confirmed by the airlines.

The route that keeps working

The counterexample in the same State of AI piece is travel infrastructure. Sabre says nearly 80 customers are piloting or using its MCP server in production, including Virgin Australia, Flight Centre, and Internova brands, for shopping, booking, and servicing. Airlines are also starting to publish their own governed agent channels: Retailaer’s airline MCP early access lets an airline expose offers and orders to agents under its own rules. Our map of travel MCP servers tracks who offers what.

What to change if you build AI travel agents

Inventory the steps that run through someone else’s website. Any step where your agent signs in as the traveller and clicks through a checkout can stop working the day that site changes its bot rules. State of AI’s advice to enterprise teams applies directly: know which steps run through approved integrations and which do not.

Keep the traveller’s passwords out of the agent. Banks in the same report were explicit about shared credentials. For travel, the safer pattern is supplier credentials held on a server, scoped tokens for your agent, and no traveller login stored in the model’s context.

Treat the extras the same way as the ticket. Seats and bags booked inside an airline’s own flow are the airline’s business. The extras around the trip, such as travel insurance, disruption cover, an eSIM, a lounge on a connection, or a transfer, come from suppliers that already sell through APIs. Calling those APIs is more durable than scraping an “add extras” page.

Quote first, then confirm. A sanctioned API doesn’t remove the need for consent. A search or quote call is safe to run; a paid call should wait for the traveller’s explicit yes and carry an idempotency key, so a retry never buys twice.

Where Ancilair fits

Ancilair is a tool shelf for the extras around the ticket: insurance, disruption cover, eSIM, lounges, fast track, and transfers, exposed as MCP, REST, or CLI tools under one token. Supplier credentials are injected on the server and aren’t meant to reach the agent’s machine. Each price is quoted on the call at the supplier’s rate with 0% markup, and paid calls run only after the traveller approves. Flights stay with your flights API; After Duffel covers how the two sit together, and the agents page has setup notes for common hosts.

What to watch

Whether Delta or other airlines announce a sanctioned channel for outside agents, and on what terms.
Progress on the open agent-to-business standard that Meta, Walmart, Stripe, and others said they are working on, per TechCrunch.
Whether more travel sites adopt paid or licensed access for agents, as Yelp has for its data.

Sources

Details summarised from public reporting as of October 19, 2026. Delta, United, Sabre, and the other companies named did not review this article. Not legal advice; read each site’s and supplier’s terms for your own use case.

Questions

Is Delta blocking AI agents?: Delta told TechCrunch that it does not currently have a partnership or integration that enables a third-party AI agent to shop for or book Delta flights on a customer's behalf on its digital platforms, and that it is taking steps to protect customers from unauthorized automated activity. It added that it continues to evaluate how external AI agents could enhance the way customers engage with Delta.
Which other companies are restricting agents?: State of AI reported on Oct. 18, 2026 that Delta, JPMorgan Chase, Charles Schwab, and Yelp have confirmed restrictions, and that Amazon has blocked Meta's Muse agent since Sept. 20. Users have also reported blocks elsewhere that the companies have not confirmed.
Which agents still get through?: Per State of AI, agents that come in through partnerships, paid licenses, APIs, or a declared identity are faring better than agents that drive a browser with the customer's password. In travel it points to Sabre, which says nearly 80 customers are piloting or using its MCP server in production.
Does this mean my agent cannot book flights?: No. It means the route matters. Flights booked through a flights API, a GDS or NDC connection, or an airline's own sanctioned agent channel are a different case from an agent clicking through an airline's website. Check each supplier's terms; this article is not legal advice.
Is this legal advice?: No. This is industry news for builders of AI travel products. Read each site's and supplier's terms for your own use case.