Standards & Protocols Reference

IAB Agentic Standards.

A practical guide to AAMP, ARTF, Agentic Audiences, Agent Registry, and the IAB Tech Lab roadmap for agentic advertising.

IAB Tech Lab's agentic work is not a single spec. It is an umbrella initiative for bringing agentic execution into the advertising ecosystem through foundations, protocols, and trust infrastructure built on existing industry standards.

IAB Tech Lab agentic standards — AAMP over three pillars, built on existing standards. IAB TECH LAB · AGENTIC STANDARDS AAMP — the Agentic Advertising / Marketing Protocol umbrella initiative that coordinates all three pillars. AAMP Umbrella initiative — the agentic advertising program UMBRELLA Agentic Foundations — ARTF, the container runtime, and real-time execution that let agents act, not just exchange files. PILLAR 01 Agentic Foundations ARTF Container runtime Real-time execution Agentic Protocols — the buying-language layer: Agentic Direct, Deals, Audiences, Ad Objects, and the Buyer/Seller SDKs. PILLAR 02 Agentic Protocols Agentic Direct Agentic Deals Agentic Audiences Agentic Ad Objects Buyer / Seller SDKs Trust & Transparency — the Agent Registry, identity, verification, disclosure, and audit that keep agentic activity accountable. PILLAR 03 Trust & Transparency Agent Registry Identity Verification Disclosure Audit Existing IAB Tech Lab standards — OpenRTB, AdCOM, OpenDirect, the Deals API, and taxonomies that the agentic layer is built on. FOUNDATION Existing IAB Tech Lab standards OpenRTB AdCOM OpenDirect Deals API Taxonomies Agentic foundations, protocols, and trust — built on existing standards.
AAMP umbrella over three pillars — foundations, protocols, trust — built on existing IAB Tech Lab standards.

Agentic advertising needs more than agents. It needs standards for execution, signal exchange, identity, governance, transparency, and audit.

Standard readiness (validate before build)
  • AAMP v1.0
  • ARTF v1.0 public comment
  • Agentic Audiences released
  • Agent Registry live · Mar 2026
  • Agentic Bid / Mobile Q2 2026

Fast read

What it is
AAMP is IAB Tech Lab's umbrella initiative for agentic advertising standards.
Core pieces
ARTF for containerized real-time execution, Agentic Audiences for signal exchange, Agent Registry for transparency, and agentic versions of existing standards.
What it is not
Not a single replacement for OpenRTB, AdCOM, OpenDirect, or Deals API.
Why it matters
Agentic advertising must extend proven transaction standards instead of creating disconnected automation layers.
Best for
Adtech, publishers, platforms, agencies, measurement companies, data vendors, and product teams building agentic advertising infrastructure.
Watch-out
The standards are evolving quickly. Validate official docs, repos, and public-comment status before implementation.
Definition

What AAMP is.

AAMP — Agentic Advertising Management Protocols — is IAB Tech Lab's umbrella initiative for agentic advertising work. It organizes the agentic roadmap across foundations, protocols, and trust infrastructure.

LayerJobExamples
Agentic FoundationsHigh-performance execution and controlARTF, container runtime, real-time services
Agentic ProtocolsSchemas, tools, and open-source reference implementationsAgentic Direct, Agentic Deals, Agentic Audiences, Buyer / Seller SDKs
Trust & TransparencyIdentity, disclosure, accountabilityAgent Registry, verification, audit
Structure

The three pillars of AAMP.

  • 01

    Agentic Foundations

    The execution layer: how agent services can operate within host platforms, including real-time environments.

  • 02

    Agentic Protocols

    The management and workflow layer: how buyer and seller agents discover, negotiate, transact, exchange signals, and complete setup tasks.

  • 03

    Trust & Transparency

    The accountability layer: how the ecosystem verifies agents, understands authority, and preserves trust.

The three pillars of AAMP — execution, management, and trust. THE THREE PILLARS OF AAMP Agentic Foundations — the execution layer: agent services run inside host platforms, including real time. 01 EXECUTION LAYER Agentic Foundations Agent services insidehost platforms —including real time. Agentic Protocols — the management and workflow layer: discover, negotiate, transact, and exchange signals. 02 MANAGEMENT LAYER Agentic Protocols Discover, negotiate,transact, andexchange signals. Trust & Transparency — the accountability layer: verify agents, their authority, and disclosure. 03 ACCOUNTABILITY LAYER Trust & Transparency Verify agents,authority, anddisclosure. Execution, management, and trust — each required to operate at scale.
Foundations (execution), protocols (management), and trust (accountability).
Agentic Foundations

ARTF: the real-time container runtime.

ARTF — Agentic Real Time Framework — defines a foundation for agent services operating inside a host platform. The model uses containers deployed into host infrastructure so the orchestrating platform can call agent services directly while preserving latency, cost, privacy, and operational controls.

  • Containerized (OCI-compliant) service agents deployed into host infrastructure
  • Direct calls by the orchestrating / host platform
  • Bidstream mutation via declared intents the host can accept or reject
  • Use cases: identity resolution, segmentation / deal activation, fraud detection, bid valuation
  • Host platforms retain data control and SLAs; agents run with restricted network access
  • Written primarily for engineers and product managers implementing the framework

Status: released as v1.0 for public comment (the standards page indicates finalization is forthcoming, with v2.0 in development). The press release describes reducing bid request/response time up to 80% — a design target on the page, not a guaranteed benchmark.

ARTF: a sealed service container runs inside the host — low latency, host keeps control. REAL-TIME CONTAINER RUNTIME Service provider — builds and seals the container a single time, then ships it. 01 Service provider packages container once Host platform — runs the sealed container inside its own environment. 02 Host platform deploys the container Orchestrator — invokes the in-host service at runtime, low latency. 03 Orchestrator calls the service Sealed container — the package has no external network access; it runs only inside the host. no external network access Controlled bidstream mutation — the service declares intents; the host accepts or rejects each one. 04 Controlled bidstream mutation intents · accept / reject Host control — the host retains data control, enforces SLAs, and keeps a full audit trail. Host retains data control · SLAs · audit Run service agents inside the host — low latency, host keeps control.
Package once, deploy into the host, call directly — host keeps data control, SLAs, and audit.
Agentic Protocols

Agentic Audiences: signal exchange for agents.

Agentic Audiences, formerly UCP / User Context Protocol, defines how intelligent agents exchange identity, contextual, and reinforcement signals. The important shift is the use of embeddings as a compact, privacy-preserving, interoperable representation for signal exchange — the same operating idea as signal containerization.

  • Formerly the User Context Protocol (UCP)
  • Donated by LiveRamp to IAB Tech Lab
  • Three signal types: identity, contextual, and reinforcement
  • Encoded as dense embeddings of 256–1024 dimensions
  • Designed to support sub-100ms response times for real-time bidding (a design target)
  • Open-source repository (specification under CC BY 4.0; implementations under Apache 2.0)

Signals travel as compact vectors — typically 256–1024 dimensions — instead of raw identifiers:

agentic audiences — signal payload illustrative
{
  "signal_type": "contextual",
  "embedding": {
    "dim": 512,
    "vector": [0.0123, -0.0456, 0.0789, "… 512 floats …"]
  },
  "ttl_seconds": 1800,
  "privacy": { "raw_pii": false }
}
Agentic Audiences — raw signals compress into a compact embedding, then exchange across agents, DSP/SSP, clean room and measurement. EMBEDDING-BASED EXCHANGE 01 · RAW SIGNALS 02 · TRANSFORM 03 · EXCHANGE 04 · OUTPUT Raw signals — identity, contextual and reinforcement signals are the inputs, before any compression. Raw signals identity contextual reinforcement Transform — the signals are compressed into one compact vector, the unit that actually moves between systems. TRANSFORM embedding / vector 256–1024 dims agents — a venue the embedding can be exchanged across without moving raw signals. agents DSP / SSP — a venue the embedding can be exchanged across without moving raw signals. DSP / SSP clean room — a venue the embedding can be exchanged across without moving raw signals. clean room measurement — a venue the embedding can be exchanged across without moving raw signals. measurement Output — interoperable across venues, faster to match, and moving far less raw data. Output privacy-aware interoperability fast matching less raw-data movement Signals as compact embeddings — interoperable, privacy-aware, fast.
Raw signals → embedding → exchange across agents, platforms, clean rooms, and measurement.
Trust & Transparency

Agent Registry: trust and transparency.

Agentic workflows require participants to know which agents exist, who operates them, what they are authorized to do, and how they should be verified. Agent Registry is the trust and transparency layer in the IAB Tech Lab roadmap.

  • Agent identity, verification, and disclosure
  • Registrants associate a GPP ID (including TCF GVL IDs) for validation
  • A browsable directory plus a REST API; the registry is itself an MCP server
  • Went live March 3, 2026; free to register; described as a "test and learn" phase
  • Seller-agent verification ("ads.txt for agents") is a stated roadmap item, not a current feature
Agent Registry: a six-step trust chain that binds identity and authorization to every agent action. TRUST & TRANSPARENCY Agent Registry Agent — the autonomous actor that initiates a request on a buyer or seller’s behalf. 01 Agent Operator — the company or party that runs the agent and is accountable for it. 02 Operator Authority — the scope the agent was delegated: what it is permitted to do. 03 Authority Verification — identity, GPP / TCF IDs, and disclosure are checked and bound to the action. (The hinge of the chain.) 04 Verification Transaction — the governed action proceeds only after verification passes. 05 Transaction Audit — an immutable trace of who acted, who ran it, and what was authorized. 06 Audit identity · GPP / TCF IDs · disclosure Know which agent acted, who runs it, and what it was authorized to do.
Agent → operator → authority → verification → transaction → audit.
Foundations

Built on existing advertising standards.

The IAB Tech Lab approach starts from existing standards because those standards encode years of transaction, object, taxonomy, privacy, and measurement knowledge. Agentic systems need to reference those standards, not bypass them.

  • OpenRTB

    Real-time bidding objects; now enabled to carry Agentic Audiences.

  • AdCOM

    The common object model — basis for Agentic Ad Objects (now MCP-capable).

  • OpenDirect

    Direct-deal workflow — basis for Agentic Direct (now MCP-capable).

  • Deals API

    Programmatic deals — basis for Agentic Deals (now MCP-capable).

  • Taxonomies

    Content, Audience, Ad Product, and Privacy taxonomies agents read.

  • Agentic Direct / Deals / Ad Objects

    Existing standards made MCP-capable for agents.

  • Buyer / Seller Agent SDKs

    Open-source reference agents built on AdCOM, OpenDirect, Deals API, OpenRTB.

  • Agentic Bid / Agentic Mobile

    Stated as MCP-capable in Q2 2026 — track official status.

Complementarity

AdCP and AAMP: not a simple either / or.

The useful question is not which acronym wins. It is which layer solves which problem. AdCP is a task and workflow language for advertising agents. AAMP is IAB Tech Lab's umbrella for extending existing standards into the agentic era. ARTF is the execution runtime; Agentic Audiences is a signal exchange layer. These can be complementary when boundaries are clear.

AdCP 3.1 RC

RoleAgent task and workflow protocol

Best questionWhat can the agent discover, ask, buy, activate, govern, or report?

Main risk if misreadTreated as complete infrastructure rather than a workflow layer

AAMP v1.0

RoleUmbrella standards initiative

Best questionHow does agentic advertising extend existing standards?

Main risk if misreadTreated as one monolithic spec

ARTF public comment

RoleContainerized real-time execution

Best questionHow can services run inside host platforms with low latency and control?

Main risk if misreadConfused with a buyer workflow protocol

Agentic Audiences released

RoleEmbedding-based signal exchange

Best questionHow do agents exchange identity, contextual, and reinforcement signals?

Main risk if misreadTreated as another segment taxonomy

OpenRTB / AdCOM / Deals API / OpenDirect foundational

RoleFoundational transaction and object models

Best questionWhat existing market objects should agentic systems reference?

Main risk if misreadBypassed by new agent workflows

Which layer solves which problem — five complementary agentic standards, each answering one question. STANDARDS · COMPLEMENTARITY Which layer solves which problem STANDARD ROLE IT PLAYS BEST QUESTION IT ANSWERS AdCP — agent task & workflow; answers: what should the agent do? AdCP agent task & workflow what should the agent do? AAMP — umbrella standards initiative; answers: how do we extend existing standards? AAMP umbrella standards initiative how do we extend existing standards? ARTF — containerized real-time execution; answers: how do services run in host platforms? ARTF containerized real-time execution how do services run in host platforms? Agentic Audiences — embedding signal exchange; answers: how do agents exchange signals? Agentic Audiences embedding signal exchange how do agents exchange signals? OpenRTB / AdCOM / Deals API — foundational object & transaction models; answers: what objects do we reference? OpenRTB / AdCOM / Deals API foundational object & transaction models what objects do we reference? Define the layer before debating the acronym.
Define the layer before debating the acronym.
Implementation

Implementation lens by company type.

Pick your company type to see what to build first — and the AAMP frameworks and standards it leans on.

Select your company type
Focus

ARTF containers, bidstream mutation, deals, seller agents, agent registry, signal exchange.

  • ARTF
  • Agentic Deals
  • Agent Registry
  • Agentic Audiences
Focus

Buyer agents, agentic deals, signals, governance, OpenRTB / AdCOM alignment, measurement.

  • Buyer Agent SDK
  • Agentic Deals
  • OpenRTB / AdCOM
  • Agentic Audiences
Focus

Seller agent, inventory discovery, OpenDirect, deal workflow, content monetization, agent registry.

  • Seller Agent SDK
  • OpenDirect
  • Agent Registry
Focus

Agentic Audiences, embeddings, identity / context / reinforcement signals, provenance, activation.

  • Agentic Audiences
  • embeddings
  • Agent Registry
Focus

Buyer agents, governance, direct and programmatic workflows, reporting, approval, audit.

  • Buyer Agent SDK
  • Agentic Direct
  • governance
Focus

Event flow, audit, outcome reporting, fraud, suitability, trust.

  • Agent Registry
  • audit
  • OpenRTB
Focus

Agentic ad objects, creative formats, approvals, brand safety, content monetization.

  • Agentic Ad Objects
  • AdCOM
  • brand safety
Watch

Standards watchlist.

What to track as these specifications evolve. Roadmap timing reflects official statements at the validation date and can change.

AAMP roadmap

Track new releases and reference implementations.

ARTF v1 / v2

Track finalization status, sample code, and container runtime requirements.

Agentic Audiences

Track embedding schemas, signal types, privacy guidance, and repository changes.

Agent Registry

Track registration requirements, verification model, and adoption.

Agentic Direct / Deals / Ad Objects

Track how existing standards become MCP-capable.

AdCP 3.1 RC

Track compatibility, task changes, and implementation guidance.

OpenRTB / AdCOM bridge

Track how real-time buying objects connect to agentic workflows.

Governance and audit

Track human-in-the-loop, signature, consent, and accountability requirements.

No Fluff POV

Scale comes from standards, not better prompts.

Agentic advertising will not scale because agents get better at writing prompts. It will scale when agents can operate inside standards-based systems with clear schemas, runtimes, permissions, registries, provenance, audit, and outcome measurement.

  • Use existing standards wherever possible.
  • Define the layer before debating the acronym.
  • Do not let agentic workflows bypass accountability.
  • Treat embeddings as signal infrastructure, not magic.
  • Treat containers as execution infrastructure, not generic AI wrappers.
  • Use protocols to reduce ambiguity, not to create theatre.
Stack fit

Where this fits in the full standards stack.

The layer map

AAMP, ARTF, and Agentic Audiences define the agentic runtime, signal-exchange, and trust layer. Around it sit the transaction rails (OpenRTB, AdCOM, OpenDirect, Deals API), privacy and consent constraints (GPP, TCF, platform and OS rules), measurement trust (verification, OM SDK, accreditation), and the research evidence that validates outcomes.

Next step

Building against the agentic standards layer?

Map the workflow, standards layer, runtime, signal model, governance path, and business outcome before choosing what to implement first.