> ## Documentation Index > Fetch the complete documentation index at: https://docs.interchange.io/llms.txt > Use this file to discover all available pages before exploring further. # Preview a creative in an exact placement context > Resolve the safest available preview for one immutable review version and one opaque, review-scoped placement context. Publisher-designated output is authoritative; serving-platform output is labeled representative. Submitted display tags and remote VAST remain source-only unless an authorized preview provider returns a render. ## OpenAPI ````yaml /v2/storefront-api-v2.yaml post /creative-reviews/{creativeId}/preview openapi: 3.0.0 info: title: Scope3 Storefront API version: 2.0.0 description: >- REST API for partners to manage Seller Accounts, inventory sources, and billing. ## Authentication All endpoints require a Bearer token in the Authorization header: ``` Authorization: Bearer your-api-key ``` ## Base URL `https://api.interchange.io/api/v2/storefront` ## For AI Agents AI agents can use the MCP endpoint at `/mcp/v2/storefront` with three tools: - `initialize`: Start an MCP session - `api_call`: Make REST API calls - `ask_about_capability`: Learn about API features servers: - url: https://api.interchange.io/api/v2/storefront description: Production server security: [] tags: - name: Account description: Account management, service tokens, and preferences - name: Asks description: >- What you are waiting on Scope3 for — support, product, and supply asks in one list - name: Storefront description: Manage storefront and inventory sources - name: Storefront Agents description: List and manage registered sales, signals, and outcomes agents - name: Storefront Activity description: Audit log of configuration and inventory changes on the storefront - name: Storefront Billing description: Payout bank details and billing configuration for Seller Accounts - name: AI Usage description: Seller Account AI token usage visibility by model - name: MCP description: Model Context Protocol endpoints paths: /creative-reviews/{creativeId}/preview: post: tags: - Storefront summary: Preview a creative in an exact placement context description: >- Resolve the safest available preview for one immutable review version and one opaque, review-scoped placement context. Publisher-designated output is authoritative; serving-platform output is labeled representative. Submitted display tags and remote VAST remain source-only unless an authorized preview provider returns a render. operationId: previewCreativeReview parameters: - in: path name: creativeId schema: type: string pattern: ^review:[1-9]\d*$ description: >- Immutable review reference returned by the queue. Preview requires the exact `review:` namespace; bare creative ids are not accepted. example: review:42 required: true description: >- Immutable review reference returned by the queue. Preview requires the exact `review:` namespace; bare creative ids are not accepted. requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/PreviewCreativeReviewBody' responses: '200': description: Preview a creative in an exact placement context content: application/json: schema: $ref: '#/components/schemas/CreativeReviewPreviewResponse' '400': description: Bad request content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '404': description: >- The review context does not exist, is stale, belongs to another storefront, or no longer matches the requested content digest. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' security: - bearerAuth: [] components: schemas: PreviewCreativeReviewBody: type: object properties: context_ref: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ description: >- Opaque preview context returned on this exact review. The server resolves all route, provider, capability, package, and placement identity. expected_content_digest: type: string pattern: ^[a-f0-9]{64}$ description: >- SHA-256 content digest from the exact review version being previewed. expected_review_version_digest: description: >- Versioned review identity from this exact review row. Legacy callers may omit it; the server then derives the current identity from the persisted review context. A supplied value must match, and the request is rejected if the version changes before or after provider dispatch. type: string pattern: ^[a-f0-9]{64}$ required: - context_ref - expected_content_digest additionalProperties: false description: >- Requests an authority-resolved preview for one immutable creative review placement context. CreativeReviewPreviewResponse: type: object properties: status: type: string enum: - completed - source_only contextRef: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ authority: type: object properties: kind: type: string enum: - serving_platform - publisher_preview_provider - publisher_presentation - community_reference - manifest authoritative: type: boolean fidelity: type: string enum: - authoritative - reference - source_only placementId: type: string minLength: 1 required: - kind - authoritative - fidelity additionalProperties: false preview: type: object properties: result: description: >- Opaque legacy preview payload. Clients must treat it as inert data: provider HTML and render envelopes are never executed, mounted, prefetched, or used for navigation. expiresAt: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$ metadata: {} required: - result additionalProperties: false representativeSellerPreview: type: object properties: result: description: >- Opaque legacy preview payload. Clients must treat it as inert data: provider HTML and render envelopes are never executed, mounted, prefetched, or used for navigation. expiresAt: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$ metadata: {} required: - result additionalProperties: false sourceTrust: nullable: true type: object properties: classification: type: string enum: - platform_managed_media - platform_assembled_static - buyer_supplied_active evidence: type: object properties: kind: type: string minLength: 1 digest: type: string pattern: ^[a-f0-9]{64}$ policyVersion: type: string enum: - creative-review-source-trust/v1 required: - kind - digest - policyVersion additionalProperties: false reviewVersionDigest: type: string pattern: ^[a-f0-9]{64}$ inlineAssets: description: >- Legacy response metadata retained for compatibility. Clients must never use these URLs to create image, video, audio, source, prefetch, or other browser network requests; SHA-256 digests are consistency checks, not signatures or rendering authority. maxItems: 20 type: array items: type: object properties: kind: type: string enum: - image - video - audio url: type: string format: uri pattern: ^https:\/\/.* required: - kind - url additionalProperties: false staticRepresentation: type: object properties: kind: type: string enum: - text value: type: string maxLength: 16000 required: - kind - value additionalProperties: false required: - classification - evidence - reviewVersionDigest additionalProperties: false externalOpen: type: object properties: url: type: string format: uri pattern: ^https:\/\/.* hostname: type: string minLength: 1 expiresAt: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$ authorizedOrigin: type: string format: uri description: >- Exact normalized credential-free HTTPS origin of the reviewed preview provider. This is not a navigation URL. example: https://preview.publisher.com required: - url - hostname - expiresAt - authorizedOrigin additionalProperties: false required: - status - contextRef - authority - preview - sourceTrust additionalProperties: false description: >- Authority-resolved preview result. Provider payloads remain inert data only: clients must never mount, prefetch, or execute provider content. A separate external-view envelope may only be opened after a second explicit user gesture through the MCP host bridge. ErrorResponse: type: object properties: data: type: string nullable: true enum: - null error: $ref: '#/components/schemas/ApiError' required: - data - error additionalProperties: false description: Standard error response ApiError: type: object properties: code: type: string description: Machine-readable error code message: type: string description: Human-readable error message field: description: Field path associated with the error type: string details: description: Additional error context type: object additionalProperties: {} required: - code - message additionalProperties: false description: Structured error object securitySchemes: bearerAuth: type: http scheme: bearer description: API key or access token ````