
Our tools monitor millions of native, push, pop, and TikTok advertising campaigns.
Get StartedAI agents are moving beyond the role of writing assistants. They are beginning to participate in real advertising workflows, from discovering inventory and evaluating audiences to planning and executing media buys.
One example is Apostra, which reportedly handled approximately $1.2 million in automated media buys over three months. Another is Rouge Care, a red-light therapy brand that attributed more than $125,000 in sales to a $25,000 connected-TV campaign facilitated through PubMatic’s AgenticOS. The campaign was reported as a fivefold return on ad spend, although it remains a company-reported case rather than a guarantee of what other advertisers can achieve. Adweek reported on these early agentic media buying deployments.
The wider advertising industry is also paying attention. An IAB outlook cited in MarTech’s coverage of agentic media buying found that 96% of buyers were aware of agentic AI for ad buying, with two-thirds increasing their focus on the technology. On the supply side, companies such as PubMatic, Magnite, Kargo, and The Trade Desk are developing systems and infrastructure intended to support more agent-driven planning and transactions.
But growing interest does not mean advertisers are ready to hand over complete control. Even the early success stories involve defined workflows, platform infrastructure, and human oversight. Gartner has projected that only 15% of agentic AI deployments will be highly autonomous by 2028, according to the figures cited in Adweek’s reporting. That is a useful reminder that practical adoption is likely to involve gradual delegation rather than an immediate replacement of media teams.
For advertisers, the opportunity is not simply to build an AI that can spend money. It is to create a supervised system that can continuously research the market, organize competitive intelligence, generate testable ideas, and help optimize campaigns within clearly defined limits.
This is where ad intelligence platforms such as Anstrex can become part of a broader agentic workflow.
In this guide, we will explore how to build that system around three core activities:
We will also look at how emerging standards such as AdCP and the IAB Tech Lab’s AAMP are helping define how advertising agents communicate and operate.
The goal is straightforward: make AI agents useful as tireless research and optimization operators without giving them unrestricted authority over your advertising budget.
Media buying has always been a problem of limited attention. Even experienced traders can monitor only so many placements, publishers, partners, campaign reports, and supply paths at once.
As advertising becomes more fragmented, the amount of information a media team must evaluate keeps growing. An agentic workflow can help process that information continuously, identify patterns, and prepare decisions faster than a team working entirely by hand.
The shift is already visible in early programmatic deployments.
Apostra has reportedly handled around $1.2 million in automated media buys over a three-month period. In another example, Rouge Care attributed more than $125,000 in sales to a $25,000 CTV campaign facilitated through PubMatic’s AgenticOS. These examples show that AI agents are beginning to participate in real media buying activity, although they do not establish that the same results are repeatable across advertisers or channels. Adweek’s coverage of agentic media buying provides the reported details.
The important development is not that an agent can automatically spend a budget. It is that agents can increasingly connect research, planning, execution, and reporting within a more integrated workflow.
The infrastructure supporting these workflows is also developing.
The IAB Tech Lab’s Agentic Advertising Management Protocols, or AAMP, are designed to help advertising agents work within established advertising systems and standards. The AAMP 2.3 release introduced improvements around enterprise deployment, interoperability, governance, privacy diligence, and pricing integrity. It also expanded integrations and execution capabilities, including Google Ad Manager reporting and Meta Ads integrations. MarTech covered the AAMP update.
This is an important distinction: an advertising protocol does not automatically make an AI agent safe or effective. It provides a more structured way for systems to communicate and carry out defined tasks. Advertisers still need to determine what an agent is allowed to access, which actions require approval, and how its decisions will be monitored.
Interest in agentic AI is growing across marketing and advertising. Ahrefs’ analysis of AI marketing trends discusses the growing attention around AI agents and their potential role in research and decision-making.
However, interest should not be confused with readiness for unrestricted automation. Media teams still need to manage attribution, brand safety, inventory quality, privacy, and commercial accountability.
The legal and commercial implications are also changing. As agencies and brands negotiate how generative AI can be used, contracts increasingly need to address ownership, disclosure, vendor protections, and responsibility for AI-assisted work. All About Advertising Law’s review of agency contract negotiations highlights the importance of defining those responsibilities.
The same questions become even more important when an agent can recommend or execute a media transaction.
A system might remain within its assigned spending limit and still make a poor decision if it relies on misleading inventory information, inaccurate pricing, weak attribution, or low-quality traffic. Budget controls are necessary, but they are not a substitute for sound decision rules.
The practical direction is therefore supervised autonomy: humans define the objectives and boundaries, while agents handle repeatable research, analysis, and approved operational tasks.
If you want AI agents to support media buying without putting your budget at risk, start by defining their responsibilities.
The first question should not be which AI model to use. It should be what each agent is responsible for, which systems it can access, and which actions it is allowed to perform.
Think of the agent stack as a specialized trading desk rather than one all-powerful bot.
Research agents gather information and prepare opportunities for evaluation.
Their responsibilities may include:
For example, Goodway Group has described feeding buyer agents client media briefs and assessing the audiences and inventory sources recommended by seller agents. This illustrates how agents can help evaluate options without necessarily making the final commercial decision. AdExchanger’s interview on agentic AI and supply-path optimization discusses these early experiments.
A research agent should primarily gather, classify, and recommend. It should not be given authority to sign agreements or commit media spend simply because it can identify an opportunity.
Planning agents turn research into structured campaign proposals.
They can translate a media brief into:
These agents should produce draft plans that can be reviewed against the advertiser’s objectives and historical results.
They should not change live budgets or launch campaigns unless a separate approval process explicitly grants that permission.
Execution agents operate closest to the actual buying systems.
Depending on the integrations and permissions available, they may be able to:
The reported Rouge Care campaign using PubMatic’s AgenticOS is an example of agentic systems participating in a real CTV buying workflow. It is evidence of an emerging capability, not proof that every advertiser should delegate all buying decisions to an agent. Adweek’s report provides the campaign context.
A mature system can also include a dedicated governance agent.
Its job is to check whether other agents are operating within approved policies. It may review:
For example, a governance rule might state that no agent can use an unapproved data provider, create a new audience based on sensitive information, or enter a principal buying arrangement without human approval.
These rules should be enforced through system permissions and workflow checks wherever possible. A prompt that merely tells an agent to behave responsibly is not a sufficient control.
A useful agent stack needs explicit boundaries.
1. Define permissions by role. Each agent should have access only to the APIs, accounts, reports, and data required for its assigned task. Research agents should not automatically inherit execution permissions.
2. Set financial limits. Establish daily and lifetime spending caps, bid adjustment ranges, pacing thresholds, and maximum budget changes. Enforce these limits outside the model wherever possible.
3. Restrict supply paths. Define approved exchanges, publishers, resellers, deal types, and inventory sources. An agent should not be allowed to pursue cheap inventory that violates the advertiser’s quality or security requirements.
4. Control creative and data use. Specify which AI vendors, creative assets, customer data, and targeting methods are approved. Record where generated assets and recommendations originated.
5. Require approval for material changes. New channels, substantial budget increases, new audience types, and changes to data usage should trigger a human review.
These controls are particularly important as agencies and advertisers negotiate AI-related responsibilities and transparency obligations. All About Advertising Law’s agency contract analysis provides useful context for why those boundaries need to be explicit.
The human control plane is the layer that keeps the overall system accountable.
It should provide:
The objective is not to make humans approve every minor adjustment. It is to make sure people remain responsible for strategy, risk, and the decisions that materially affect the business.
Many marketers use ad spy tools as visual galleries. They scroll through competitor ads, save interesting examples, and sometimes borrow a headline or creative idea.
That approach may help with manual inspiration, but it does not take full advantage of an agentic workflow.
An AI agent needs structured information it can search, compare, and interpret. The purpose of the Spy Layer is to turn visible advertising examples into a consistent creative intelligence database.
Anstrex can provide the competitive ad examples and available metadata. Agents can then help organize those observations into patterns that inform research and testing.
The key is to distinguish what the data actually shows from what the agent is only inferring.
Start by defining a consistent schema for every collected ad.
At minimum, each record should include:
The taxonomy should be consistent enough that two different agents classify the same creative in approximately the same way.
This is similar in principle to the standardization work taking place across agentic advertising infrastructure. The IAB Tech Lab’s AAMP initiative is designed to make agent workflows more structured and interoperable. Its AAMP coverage and documentation explain the broader effort.
A practical Spy Layer can use four stages.
For example, an agent could identify a percentage-based offer combined with a deadline and classify it as a discount offer with urgency messaging.
The result is not simply a folder of screenshots. It is a searchable dataset that allows a strategist to ask questions such as:
Ad spy tools generally do not reveal a competitor’s actual profit, CPA, conversion rate, or return on ad spend.
However, visible activity can provide useful research signals.
The Spy Layer can record:
These indicators can help prioritize which campaigns deserve closer investigation.
But they must not be treated as confirmed performance data. An ad that remains active may be profitable, but it may also be part of a test, a brand-awareness campaign, or a campaign with different success criteria. Multiple variants may indicate systematic testing, but they do not prove that those variants are winning.
A better approach is to create a research priority score, not a claimed performance score. The score can combine visible signals such as persistence, placement breadth, and creative variation, while clearly labeling the result as an estimate based on observed activity.
The agent can then recommend which creative clusters deserve human review or further testing.
This is the same general challenge faced in other buying decisions: agents often need to synthesize incomplete information. MarTech’s coverage of AI in software purchasing discusses the growing role of AI in research and shortlisting. For media buyers, the important lesson is to preserve uncertainty rather than turn partial evidence into false certainty.
The purpose of creative intelligence is not to copy another advertiser’s execution.
Instead, the Spy Layer should extract reusable strategic elements and pass them to a creative agent as constraints.
For example:
Generate five original scripts for a 30-second UGC-style video. Use a problem-to-relief emotional structure, a problem-first angle, and a social-proof close. Explore a quiz-based pre-qualification offer. Do not reproduce a competitor’s exact wording, visual identity, or distinctive creative execution.
This gives the creative agent a defined direction without asking it to duplicate a specific advertisement.
The distinction matters for both creative quality and legal risk. Brands and agencies are increasingly addressing ownership, AI vendor protections, and the use of generated material in their agreements. All About Advertising Law’s review of agency contract negotiations discusses some of these considerations.
The Spy Layer should be accessible to both human strategists and downstream agents.
Natural-language queries could include:
Programmatic filters can also help a testing agent retrieve a defined number of examples based on format, hook, offer type, or observed activity.
Ahrefs’ analysis of AI marketing trends explores how marketers are adapting to AI-assisted discovery and evaluation. In this workflow, the same principle is applied internally: your agents need a structured way to discover and evaluate creative ideas from the market.
Once the Spy Layer produces consistent, searchable intelligence, it can support the next stages of creative development, hypothesis generation, and campaign planning.
Collecting competitor ads is only the beginning.
The next step is turning observations into testable ideas. This is where the Strategy Agent connects the Spy Layer with the advertiser’s own campaign data and business objectives.
Its role is to propose what to test next, explain why the idea deserves attention, and prepare a plan that a human strategist can evaluate.
A useful strategy agent should produce specific, testable hypotheses rather than broad recommendations.
For example:
These are hypotheses, not established facts. The agent should explain what evidence led to each recommendation and what experiment could validate it.
A structured workflow can look like this:
For example, if competitor research shows repeated use of risk-reversal messaging, but the advertiser’s own data consistently favors discount-led offers, the agent should not automatically recommend copying the competitors. It should identify the disagreement and propose a controlled test.
The goal is to make the reasoning visible.
A weak targeting recommendation might simply say, “Target women aged 25–54 who are interested in fitness.”
That is not a complete strategy. It does not explain the customer problem, the creative message, or why the audience is appropriate.
A more useful workflow begins with the creative and the intended customer situation.
Step 1: Define the persona behind the creative.
A creative cluster might be associated with:
These are planning personas, not automatically verified audience attributes.
Step 2: Translate the persona into platform-native signals.
The agent can propose testable options such as interest groups, lookalike audiences, contextual placements, or curated inventory.
The available options will depend on the advertising platform, account permissions, privacy rules, and data access.
Step 3: Apply inventory and traffic-quality constraints.
The agent should not optimize only for the lowest CPM or cheapest available traffic.
Supply-path rules, allowlists, placement exclusions, and traffic-quality requirements need to be included in the planning process. A campaign that reaches a low CPA by using unsuitable inventory may create more problems than value.
This concern is also raised in MarTech’s discussion of malware guardrails in agentic media buying.
Step 4: Generate multiple targeting variants.
For each approved hypothesis, the agent can prepare a small test matrix:
The output should be a structured plan connecting persona, creative angle, targeting approach, spend tier, and risk level.
The original draft references “Agentic Audiences” as a developing capability, but the sentence ends without identifying a source.
The IAB Tech Lab now describes Agentic Audiences as an open standard for exchanging signals related to identity, context, and consumer intent or response. Its standards page lists Agentic Audiences as integrated with OpenRTB and Prebid. See the IAB Tech Lab’s Agentic Advertising and AI standards overview.
This is not a blanket permission to target people through any AI-generated inference. Advertisers still need to understand what signals are being exchanged, how they were obtained, what consent or privacy requirements apply, and which platform supports the workflow.
Before a strategy agent can pass a plan to the Buyer Layer, it should pass three checks:
The agent can recommend new audiences or targeting changes, but humans should retain approval over decisions that materially change data usage, legal exposure, or spending.
This is consistent with the broader direction of agentic advertising standards, including the IAB Tech Lab’s work on governance and workflow controls. MarTech’s coverage of AAMP provides additional context.
The Strategy Agent should not press the launch button. Its deliverable is a ranked set of hypotheses and targeting plans that have passed the required checks.
Once the Spy Agent has collected and analyzed the competitive landscape, the next task is turning the results into a consistent dataset.
This is the foundation that allows other agents to query the information and use it in research, creative planning, and testing.
Every collected advertisement should be normalized into a record containing fields such as:
| Field | What it captures |
|---|---|
| Vertical | Product or market category |
| Ad format | Video, native, static, UGC, CTV, or another format |
| Hook | The main message or opening angle |
| Creative pattern | The structure used to present the message |
| Landing-page pattern | The destination page or funnel structure |
| Observed networks and placements | Where the ad was visibly detected |
| Language and geography | Available language and location information |
| Device information | Device context where observable |
| Compliance flags | Claims, disclosures, or other issues requiring review |
The goal is not to build a complicated taxonomy for its own sake. It is to create a consistent grammar that agents and human strategists can use.
Start by grouping ads into relevant verticals, such as:
Classification can begin with keywords and destination-domain information. More advanced systems may use embeddings to compare landing-page copy with previously classified examples.
The result should be a clean dataset that allows a strategist to retrieve relevant examples without manually searching through every record.
Next, classify each ad by format.
Examples include:
The format taxonomy should reflect the actual advertising environments in which the creative appears.
As agentic buying expands into programmatic and CTV workflows, shared standards become more important. The IAB Tech Lab’s AAMP initiative and AdCP are among the efforts seeking to establish common ways for advertising systems and agents to communicate. Adweek’s reporting on agentic media buying discusses these emerging approaches.
A label such as “good headline” is too vague for a useful dataset.
Instead, define the components of a hook:
A language model can extract these attributes from available creative text. A rule-based validation layer can then check numerical claims, guarantees, and other important details.
For example, if an ad says “cut costs by 40%,” the dataset should record that the ad makes a 40% claim. It should not treat the claim as independently verified.
This distinction is important for compliance. If an agent turns a competitor’s unsupported statement into a verified product attribute, the dataset can carry that error into future creative briefs.
The advertiser’s own claims should always be checked against approved substantiation and product information.
The creative-pattern field describes how an advertisement is structured, regardless of the product being promoted.
Examples include:
Each pattern should have a short, repeatable label.
For example:
UGC_TALKING_HEAD_PASVSL_PROBLEM_SOLUTIONSPLIT_SCREEN_COMPARISONUNBOXING_SOCIAL_PROOFSTATIC_CLAIM_SOFT_CTAOnce the labels are consistent, the dataset can support comparisons across creative formats and advertising environments.
A creative-generation agent could then receive a brief such as: “Create three original variations using the UGC problem-agitate-solve structure, based on our approved product claims.”
The agent should use the structure as a creative framework, not reproduce a competitor’s distinctive execution.
Landing pages should be classified by their structure, not simply by their URLs.
Common patterns include:
The dataset can also capture useful page attributes:
There is also a developing discussion about how non-human traffic and AI systems may affect advertising and content evaluation. AdExchanger’s article on non-human audiences explores why the industry may need to rethink how it measures and values such activity.
However, an AI agent researching a product is not the same thing as a human ad impression or a confirmed conversion. Advertisers should keep machine research activity, bot traffic, human visits, and actual purchase behavior separate in their measurement systems.
A structured landing-page dataset can help teams study how different page designs present information. It cannot, by itself, prove that a page performs better for AI agents or human visitors.
Every record should include where the creative was observed.
Possible categories include:
The word observed matters.
A creative appearing on a particular site does not necessarily reveal the complete supply chain behind the impression. In many cases, the exact exchange, reseller, deal type, or buying path will not be visible.
The dataset should therefore distinguish confirmed placement information from inferred supply-path information. Use labels such as “observed,” “likely,” and “unknown” rather than presenting an estimate as a verified fact.
This distinction is important when the information is later used for supply-path optimization. AdExchanger’s discussion of agentic AI and SPO highlights why buyers need to understand the quality and structure of the paths they use.
Over time, the Scout dataset becomes a creative intelligence library: a structured collection of ads organized by vertical, format, hook, creative pattern, landing-page structure, and observed network context.
That gives the rest of the agent stack something useful to work with. Instead of asking an AI system to guess what is happening in the market, you can give it organized observations, defined fields, and clear limits on what those observations actually prove.
A structured Scout dataset is valuable only when it connects to the rest of the workflow.
The complete system should move information through a controlled sequence:
The measurement layer then feeds validated results back into the strategy process.
This creates a learning loop, but it is important to avoid confusing correlation with causation. If a creative pattern appears frequently in competitor ads and performs well in one of your own campaigns, that is useful evidence to investigate. It does not automatically prove that the pattern caused the result or will work in every audience and channel.
Do not begin by giving agents access to every advertising account and every available budget.
A safer pilot can start with one vertical, one channel, a limited set of campaign data, and a clearly defined approval process.
For example:
The first goal should be process reliability, not maximum automation.
Measure whether the agents classify information accurately, preserve source references, produce useful hypotheses, follow permissions, and create a reliable audit trail.
Only expand their responsibilities when the workflow demonstrates that it can operate safely and consistently.
Every agent-generated recommendation should make three things clear:
This prevents an AI system from presenting an attractive explanation as if it were a confirmed business result.
It also makes the workflow easier for a human strategist to review, challenge, and improve.
AI agents are beginning to take on meaningful work across advertising research, planning, and media execution. Early deployments show that they can participate in real buying workflows, while standards such as AAMP and AdCP are helping the industry develop more structured ways for advertising systems to communicate.
But the most useful opportunity for advertisers is not unrestricted automation.
It is building a connected system in which agents continuously collect competitive intelligence, classify creative patterns, generate testable hypotheses, and support approved campaign decisions.
Anstrex can serve as part of the intelligence layer by giving teams a way to examine visible competitor advertising activity. Agents can help turn those observations into structured information that is easier to query, compare, and use in planning.
The important boundary is that visible advertising activity is not the same as verified performance. An agent should be able to identify patterns and recommend tests, but it should not invent competitor results, assume that an active ad is profitable, or launch campaigns beyond its assigned authority.
Start with research. Build a reliable dataset. Connect it to first-party results. Test specific hypotheses. Add execution permissions only when the controls and measurement process are ready.
That is how media teams can use AI agents to spy, test, and scale more intelligently—without handing over the keys to the budget.
Receive top converting landing pages in your inbox every week from us.
How-To
AI agents can help media teams monitor competitors, organize creative intelligence, generate testable hypotheses, and support campaign optimization. This practical blueprint explains how to build a supervised agent workflow without handing over unrestricted control of your advertising budget.
Liam O’Connor
7 minNov 14, 2026
Recently Updated
Your reporting dashboard may show who is converting, but it may miss how the market is changing. Discover how competitive ad intelligence can reveal emerging customer needs, crowded positioning, and new opportunities for growth.
Liam O’Connor
7 minNov 14, 2026
Must Read
ROAS shows what your campaigns return, but not what competitors are teaching the market. Discover how to measure strategic imitation through competitive signals, creative insights, funnel analysis, and a repeatable Anstrex research process.
Samantha Reed
7 minNov 4, 2026



