Get a single creative by id

GET 
/creatives/:id

Returns the single usable creative with the given stable Mocart creative document id. Add ?expand=product to join the linked product, or ?showDeleted=true to read a deleted creative too (the body then carries deletedAt). The strong ETag header (plain read, or a deleted creative via showDeleted) identifies the creative state; send it back as If-Match on DELETE or undelete.

Request

Responses

200

OK. The single creative.

Response Headers

ETag

Strong hash of the creative state, sent only on the plain representation (no ?expand) and on a deleted creative read with ?showDeleted=true. Send it back as If-Match.

401

Unauthorized. Missing, malformed, unknown, revoked, or expired bearer token — or the token owner no longer holds the required entitlement (ENTITLEMENT_LOST). A uniform problem body is returned with a distinct code; no owner/condition detail (no-leak).

403

Forbidden. The token does not carry the required scope (API_TOKEN_SCOPE_DENIED).

404

Not Found. No creative matched the identifier (CREATIVE_NOT_FOUND). A cross-tenant, soft-deleted (without ?showDeleted=true), or non-usable (3D/PLAYABLE) creative id returns this SAME uniform 404 (no-leak).

429

Too Many Requests. The per-token sliding window of 200 requests/minute was exceeded. The body is express-rate-limit's DEFAULT plain-text message (NOT the JSON problem+json envelope).

Response Headers

RateLimit

IETF draft-7 rate-limit policy/state (limit, remaining, reset).

Retry-After

Seconds to wait before retrying.