get_creative_features

get_creative_features evaluates a creative manifest against a governance agent and returns feature values for brand safety and compliance in AdCP.

get_creative_features

AdCP 3.0 Proposal - This task is under development for AdCP 3.0.

Evaluates a creative manifest and returns feature values from a creative governance agent.

Use cases

• Security scanning: Detect malware, auto-redirects, credential harvesting, cloaking
• Creative quality: Evaluate brand consistency, platform optimization, guideline adherence
• Content categorization: Classify creative content against IAB Content Taxonomy or other standards
• Accessibility: Check WCAG compliance, screen reader compatibility

Request

{
  "$schema": "/schemas/creative/get-creative-features-request.json",
  "creative_manifest": {
    "format_id": {
      "agent_url": "https://creative.adcontextprotocol.org",
      "id": "html5-display-300x250"
    },
    "assets": {
      "creative_html": {
        "asset_type": "url",
        "url": "https://cdn.agency.com/creative/abc123.html"
      }
    }
  },
  "feature_ids": ["auto_redirect", "credential_harvest", "cloaking"]
}

Parameters

Parameter	Type	Required	Description
creative_manifest	object	Yes	Creative manifest with format_id and assets
feature_ids	string[]	No	Filter to specific features. If omitted, evaluates all features the agent supports.

Response

Security scanner (clean)

{
  "$schema": "/schemas/creative/get-creative-features-response.json",
  "status": "completed",
  "results": [
    { "feature_id": "auto_redirect", "value": false },
    { "feature_id": "credential_harvest", "value": false },
    { "feature_id": "cloaking", "value": false }
  ],
  "detail_url": "https://scanner.example.com/reports/ctx_abc123"
}

Response fields

Field	Description
results	Array of feature evaluation results
results[].feature_id	Which feature was evaluated
results[].value	Feature value: boolean (binary), number (quantitative), or string (categorical)
results[].confidence	Confidence score (0-1), when applicable
results[].unit	Unit for quantitative values (e.g., percentage, score)
results[].expires_at	When this evaluation expires and should be refreshed
results[].measured_at	When this feature was evaluated
results[].methodology_version	Version of methodology used
results[].details	Vendor-specific details
detail_url	URL to vendor’s full assessment. Access-controlled by the vendor.
audit_observations[]	Non-blocking observations for audit routing. These are not rejection signals by themselves.
audit_observations[].code	Machine-readable observation code, such as OVERSIGHT_DISCLOSURE_CARVEOUT_CLAIMED
audit_observations[].severity	Routing severity; currently audit-worthy
audit_observations[].recovery	Caller recovery category; currently informational
audit_observations[].field	Resolved creative manifest path for the risky claim side of the observation. Multi-field observations anchor the primary claim path, not necessarily every trigger field.
audit_observations[].message	Human-readable audit queue summary; do not include PII, cross-tenant data, or vendor-only report details
audit_observations[].details	Audit-safe details limited to { agent_url, feature_id, claimed_value, observed_value, confidence, substituted_for }
audit_observations[].details.claimed_value	For OVERSIGHT_DISCLOSURE_CARVEOUT_CLAIMED, a compact object { human_oversight, disclosure_required }; disclosure_required is the flattened alias for creative_manifest.provenance.disclosure.required.

feature_ids filters results[]; audit_observations[] may still appear when the submitted provenance itself is audit-worthy. OVERSIGHT_DISCLOSURE_CARVEOUT_CLAIMED fires when human_oversight is edited or directed and disclosure.required is false; verifier observations such as observed_value and confidence are optional audit context.

Error response

{
  "errors": [
    {
      "code": "CREATIVE_INACCESSIBLE",
      "message": "Could not retrieve creative assets for evaluation"
    }
  ]
}

Async evaluation

Some evaluations (e.g., sandboxed malware scanning) take time. The agent returns status: "working" and delivers results via webhook when complete. This uses the standard async task pattern — no custom status values needed.

Orchestrator logic

The orchestrator applies feature requirements on the client side, the same way property list feature requirements work:

const result = await agent.getCreativeFeatures({
  creative_manifest: manifest
});

if (result.errors) {
  // Handle error - reject or retry
  return;
}

// Apply security requirements
const threats = result.results.filter(
  f => ['auto_redirect', 'credential_harvest', 'cloaking'].includes(f.feature_id)
    && f.value === true
);
if (threats.length > 0) {
  // Reject - security threat detected
  return;
}

// Apply quality requirements
const quality = result.results.find(f => f.feature_id === 'brand_consistency');
if (quality && quality.value < 80) {
  // Reject - below quality threshold
  return;
}

for (const observation of result.audit_observations ?? []) {
  if (observation.severity === 'audit-worthy') {
    // Retain or route for review; do not reject solely on this signal.
    recordAuditObservation(observation);
  }
}

Relationship to property governance

Creative governance follows the same pattern as property governance:

Concept	Property governance	Creative governance
What’s evaluated	Properties (websites, apps)	Creatives (manifests)
Feature declarations	governance.property_features	governance.creative_features
Evaluation task	Property list filters	get_creative_features
Feature values	property-feature-value schema	Same fields (value, confidence, expires_at, etc.)
Detailed intelligence	Behind detail_url / methodology_url	Behind detail_url / methodology_url