---
title: "Create a human review note with a retry-safe client id"
method: POST
path: "/projects/{projectId}/traces/{traceId}/annotations"
---

# Create a human review note with a retry-safe client id

`POST /projects/{projectId}/traces/{traceId}/annotations`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/projects/{projectId}/traces/{traceId}/annotations`
- Auth: one of:
  - OAuth 2
    - Authorization code: `/api/v1/oauth/authorize`
    - Token URL: `/api/v1/oauth/token` scopes: `eval:write`
  - HTTP bearer
  - API key in cookie `cave_access`
  - API key in cookie `__Secure-cave_identity.session_token`

POST /api/v1/projects/{projectId}/traces/{traceId}/annotations on the Caveman Cloud control plane. Requires the eval:write scope. Not exposed to autonomous agents: Human trace review notes can contain captured content. Reading them requires content access; agents cannot impersonate a human reviewer.

## Request body

- object
  - `id` string, uuid, required
  - `request_id` string, uuid
  - `span_id` string
  - `label` string, required
  - `note` string, required

## Response `201`

Trace review note response

- TraceAnnotation
  - `id` string, uuid, required
  - `organization_id` string, uuid, required
  - `project_id` string, uuid, required
  - `request_id` string, uuid
  - `created_by` string, uuid
  - `updated_by` string, uuid
  - `trace_id` string, required
  - `span_id` string
  - `label` string, required
  - `note` string, required
  - `status` 'open' | 'resolved', required
  - `revision` integer, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

## Other responses

- `409`: Review changed; current scoped note permits explicit draft-preserving recovery.
- `2XX`: Successful response. Exact status depends on synchronous or durable delivery outcome.
- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)