List Notes

GET /api/notes

cURL

curl -X GET "https://your-domain.com/api/notes?page=1" \
  -H "Authorization: Bearer YOUR_TOKEN"

200

[
  {
    "id": "note_abc123",
    "title": "Meeting Notes",
    "data": {
      "content": {
        "md": "# Meeting Summary\n\nDiscussed project roadmap..."
      }
    },
    "updated_at": 1709395200,
    "created_at": 1709308800,
    "user": {
      "id": "user_123",
      "name": "John Doe"
    }
  }
]

Retrieve all notes accessible by the authenticated user with read permission.

Authorization

Requires user permission features.notes or admin role.

Query Parameters

page · integer

Page number for pagination. When provided, returns 60 notes per page.

Response

Returns an array of note objects with truncated content (max 1000 characters).

id · string · required

Unique identifier for the note

title · string · required

Title of the note

data · object

Note content data with truncated markdown

Show properties

content.md · string

Markdown content (truncated to 1000 characters)

updated_at · integer · required

Unix timestamp of last update

created_at · integer · required

Unix timestamp of creation

user · object

User information of the note creator

Show properties

id · string

User ID

name · string

User display name

cURL

curl -X GET "https://your-domain.com/api/notes?page=1" \
  -H "Authorization: Bearer YOUR_TOKEN"

200

[
  {
    "id": "note_abc123",
    "title": "Meeting Notes",
    "data": {
      "content": {
        "md": "# Meeting Summary\n\nDiscussed project roadmap..."
      }
    },
    "updated_at": 1709395200,
    "created_at": 1709308800,
    "user": {
      "id": "user_123",
      "name": "John Doe"
    }
  }
]

Access Control

• Users must have features.notes permission enabled
• Returns only notes where the user has read access
• Admin users bypass permission checks with BYPASS_ADMIN_ACCESS_CONTROL
• Group-based access control is applied automatically