---
title: "Add a note to a live verification hold"
method: POST
path: "/v1/orgs/{id}/verification-note"
tags: ["Organizations"]
---

# Add a note to a live verification hold

`POST /v1/orgs/{id}/verification-note`

## Request

- Base URL: `https://api.openrelay.inc`
- URL: `https://api.openrelay.inc/v1/orgs/{id}/verification-note`
- Auth: HTTP bearer

Adds a statement (company, use case, link) to the org's live verification hold for the reviewer; it gives context and never lifts the hold itself.
Answers 409 when the org has no active hold, or already holds the maximum number of notes.

Requires the `org.signal` permission. See [Permissions](https://docs.openrelay.inc/docs/permissions) for the roles and API key permissions that include it.

## Path parameters

- `id` string, required

## Request body

- CreateVerificationNoteRequest
  - `company` string
  - `link` string
  - `useCase` string: The only field a reviewer needs; required in practice (empty fails 400).

## Response `201`

Created

- VerificationNoteResult
  - `received` boolean, required

## Other responses

- `400`: The request is invalid
- `403`: The caller is authenticated but may not do this. The caller's role or the API key's permissions do not allow it, or the request targets another organization (FORBIDDEN, or NOT_A_MEMBER for a session); a permission denial also names the action it needed (permission), which kind of policy denied it (deniedBy) and the deciding policy ids (policies). Or the organization is suspended pending review (ORG_SUSPENDED) or has been deleted (ORG_DISABLED). A new API key or a wider scope clears neither of the last two; see [Account and balance refusals](https://docs.openrelay.inc/docs/errors#account-and-balance-refusals). A user session whose email address is not confirmed is refused on every operation (EMAIL_UNVERIFIED); confirm the address from the confirmation email, then sign in again.
- `409`: The request conflicts with existing state

## Changes

- **2026-10-26** `7fe59d94a9f5`: 3 info
  - added the optional property `requestId` to the response with the `400` status
  - added the optional property `requestId` to the response with the `403` status
  - added the optional property `requestId` to the response with the `409` status
- **2026-10-21** `dc9750cb25b5`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/openrelay/apis/openrelay-api/changes/v1/orgs/:id/verification-note/post.md)

---

[API](https://skmtc.dev/openrelay/apis/openrelay-api.md) - [All operations](https://skmtc.dev/openrelay/apis/openrelay-api/llms.txt) - [OpenAPI document](https://skmtc.dev/openrelay/apis/openrelay-api/revisions/7fe59d94a9f5?raw)