Give each agent the access it needs.

Set buying permissions, spend limits and approval thresholds for each principal. Keep authenticated control over the actions that change a buy.

See how it works
Scoped API keysPrincipal spend limitsAudit records

Coming soon. Request early access.

Access and governanceExample
Configured principalBuyer agent
readwrite
Read productsGranted
Create media buysGranted
Approve pending buysNot granted

Buying stays within the configured principal limits.Mutations leave an audit record.

Interactive example with illustrative data.

Set boundaries before the action changes a buy.

01IdentifyConfigured key
02AuthorizeGranted scopes
03ConstrainAdvertisers and spend limits
04DecideActivation or operator review
05RecordMutation audit trail
Keep sandbox buys out of live auctions.

AdCP sandbox principals can use the test controller. Their buys never bid, and they are refused on AAMP activation surfaces.

Permissions and thresholds are configured per principal. Approval is required where the configured policy calls for it.

Give each kind of authority its own boundary.

Scopes constrain actions.

Read, write and administrative permissions describe which operations a principal may request.

Grants constrain counterparties.

AAMP advertiser access and origin-domain grants narrow who the principal may act for.

Limits constrain buying authority.

Budget limits and configured approval thresholds govern the requested buy.

One configured principal table serves AdCP and AAMP.

The server verifies the key, then applies the protocol-specific grants and restrictions.

Do AdCP and AAMP need separate key tables?

The server builds both protocol surfaces from the same configured principal table. AAMP grants and advertiser restrictions are then applied for that principal. Secret values are kept outside ordinary configuration files.

View every feature
Agentic buyingDirect dealsBid diagnostics

Switch to a modern,
affordable DSP.

Buy programmatically or go direct, with agentic workflows and validation included.

Get early access.

Leave your email. We’ll be in touch when pico DSP is ready.

Only pico DSP launch and early-access updates.