- Parent entity: Every note belongs to a parent entity, identified by
entityType(a lowercase kebab-case wire slug — one ofevent,exposure,quote,submission,person,organization,policy) andentityId. TheentityTypeis supplied as a query parameter on every endpoint. PascalCase likeEventis rejected with a400. - Body: The
notebody is a free-text string and must not be empty. It is the only field you can update. - Listing: List returns a parent entity’s notes newest first. Select the parent with the
entityTypeandentityIdquery parameters, and passsearchto filter to notes whose body contains a substring (case-insensitive). - Audit fields: Responses include
createdAt/createdByandupdatedAt/updatedBy, plus a resolvedcreatedByNamefor display. - Soft delete:
DELETEsoft deletes the note; it no longer appears in list or get responses.
API Endpoints
The five Notes endpoints are listed in the left navigation:- List Notes (
GET /notes) - Paginated list of a parent entity’s notes, newest first - Create Note (
POST /notes) - Create a note on a parent entity - Get Note (
GET /notes/{noteId}) - Retrieve a note by ID - Update Note (
PATCH /notes/{noteId},PUTalias) - Update the note body - Delete Note (
DELETE /notes/{noteId}) - Soft delete a note
Permissions
Filtering (List Notes)
Pagination
The list endpoint uses 1-based pagination:page=1 is the first page. Use pageSize to control the number of records per page (default 50).