---
title: "Add a company note"
method: POST
path: "/companies/{id}/notes"
tags: ["Companies"]
---

# Add a company note

`POST /companies/{id}/notes`

## Request

- Base URL: `https://joinways.app/api/v1`
- URL: `https://joinways.app/api/v1/companies/{id}/notes`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://joinways.app/oauth/authorize`, token URL `https://joinways.app/api/oauth/token`, scopes: `mcp.write`)

Adds a note by the token owner and a timeline entry. **Role permission:** `data.write`.

## Headers

- `Idempotency-Key` string

## Request body

- object
  - `content` string, required

## Response `201`

The created note.

- CompanyNote
  - `id` string, uuid
  - `company_id` string, uuid
  - `account_id` string, uuid
  - `user_id` string, uuid: Author.
  - `author_name` string, nullable
  - `content` string
  - `created_at` string, date-time

## Other responses

- `400`: Validation failed (`invalid_request`). For a body that fails the schema, `details` holds `formErrors` and `fieldErrors`.
- `401`: Missing, invalid, expired or revoked bearer token (`unauthorized`).
- `403`: `forbidden`: the token lacks the scope, its owner's role lacks the permission named by the operation, or the workspace has neither the Pro plan nor a trial (`details.reason` `plan_not_eligible`).
- `404`: Not found in this workspace, or the id of the path is not a UUID (`not_found`).
- `429`: Too many requests (`rate_limited`). `details.reason`: `per-ip`, `per-account-minute`, `per-account-day`, or `email_rate_limited` (email budget). Always carries `Retry-After`: wait that many seconds.

---

[API](https://skmtc.dev/joinways/apis/joinways-public-api.md) · [All operations](https://skmtc.dev/joinways/apis/joinways-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/joinways/apis/joinways-public-api/revisions/39e84309953e?raw)