curl --request POST \
--url https://go.aiinsurance.io/api/v1/companies/{companyId}/notes \
--header 'Authorization: <api-key>' \
--header 'Content-Type: application/json' \
--data '
{
"entityId": "550e8400-e29b-41d4-a716-446655440200",
"note": "Adjuster called the insured for clarification."
}
'{
"id": "550e8400-e29b-41d4-a716-446655440020"
}Create Note
Creates a note on a parent entity. The parent entity type is supplied as the
entityType (lowercase kebab-case) query parameter; entityId and note are supplied
in the request body.
Sending privileged (true or false) additionally requires
note.view-privileged; without it the request is refused with 403.
Required permission: note.create.
curl --request POST \
--url https://go.aiinsurance.io/api/v1/companies/{companyId}/notes \
--header 'Authorization: <api-key>' \
--header 'Content-Type: application/json' \
--data '
{
"entityId": "550e8400-e29b-41d4-a716-446655440200",
"note": "Adjuster called the insured for clarification."
}
'{
"id": "550e8400-e29b-41d4-a716-446655440020"
}Authorizations
API key authentication. Send your raw API key as the Authorization header value with NO scheme prefix — Authorization: YOUR-API-KEY. Do NOT prefix it with Bearer or ApiKey, and do not use an X-API-Key header; those are not accepted.
Path Parameters
Company identifier
Query Parameters
Parent entity type (lowercase kebab-case URL slug), e.g. event, exposure,
policy. Selects the per-entity permission enforced for the request and
scopes the note to its parent entity. PascalCase (Event) is rejected with a
400 — matching the /entities/{type} path convention.
event, exposure, quote, submission, person, organization, policy Body
Parent entity identifier
The note body (must not be empty)
Optional back-datable "as of" ISO 8601 timestamp. When set, lists display and sort the note by this date instead of createdAt — intended for historical imports and integrations. The audit timestamps and creator attribution stay server-set.
Optional user-visible author label (trimmed; must be non-empty). When set, the note is displayed as authored by this label instead of the creator's name — intended for historical imports carrying the source system's author (or a marker like "Data Import"). Audit attribution stays server-set.
255Mark the note privileged so only holders of note.view-privileged can see or act on it.
Response
Note created successfully
The ID of the created note