> ## Documentation Index
> Fetch the complete documentation index at: https://docs.arcuserp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List polymorphic notes

> Returns notes scoped to the API key's entity. Filter by `parent_type` +
`parent_id` to scope to a single resource (order, account, product, etc).
Pinned notes sort first. Requires `notes:read` scope.




## OpenAPI

````yaml /openapi.yaml get /notes
openapi: 3.1.0
info:
  title: Arcus ERP Public API
  version: 1.0.0
  description: >
    Arcus ERP public REST API. Designed for external integrations and data
    migration.


    **Authentication.** Bearer token (API key) via the `Authorization` header.

    Format: `Authorization: Bearer ark_live_ent_<code>_<random>` (or
    `ark_test_*` for sandbox).

    API keys are issued per-entity in **Settings > Developers > API Keys**.


    **Entity scoping.** The entity is encoded in the API key prefix; routes are
    flat

    (e.g. `/v1/accounts`, `/v1/orders`, `/v1/products`). A small set of platform
    endpoints

    (migration, reconciliation, events, webhook endpoints, API keys) use the

    `/v1/entities/{entity_id}/...` form -- those are noted in their tags.


    **Key capabilities.**
      - Related-resource hydration via `?expand[]=` (see `x-arcus-expand` on each resource).
      - Cursor-based pagination (`starting_after` / `ending_before` / `limit`).
      - Idempotency via the `Idempotency-Key` header.
      - Webhook events for asynchronous notification.
      - Conditional requests / ETag for cache validation.
servers:
  - url: https://api.arcuserp.com/v1
    description: Arcus ERP API (accepts both live `ark_live_*` and test `ark_test_*` keys)
  - url: https://dev-api.arcuserp.com/v1
    description: >-
      Dev sandbox API (test-only data, accepts `ark_test_*` keys against dev
      RDS)
security: []
paths:
  /notes:
    get:
      tags:
        - Notes
      summary: List polymorphic notes
      description: >
        Returns notes scoped to the API key's entity. Filter by `parent_type` +

        `parent_id` to scope to a single resource (order, account, product,
        etc).

        Pinned notes sort first. Requires `notes:read` scope.
      operationId: listNotesV1
      parameters:
        - name: parent_type
          in: query
          schema:
            type: string
        - name: parent_id
          in: query
          schema:
            type: string
            format: uuid
        - $ref: '#/components/parameters/Limit'
        - $ref: '#/components/parameters/StartingAfter'
        - $ref: '#/components/parameters/EndingBefore'
      responses:
        '200':
          description: Paginated note list
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: array
                    items:
                      type: object
                  has_more:
                    type: boolean
      security:
        - ApiKeyAuth:
            - notes:read
components:
  parameters:
    Limit:
      name: limit
      in: query
      required: false
      description: |
        Maximum number of records to return per page. Default 25, max 500.
        Use together with starting_after for cursor pagination. For larger
        bulk extraction workflows prefer the migration endpoints.
      schema:
        type: integer
        minimum: 1
        maximum: 500
        default: 25
    StartingAfter:
      name: starting_after
      in: query
      required: false
      description: |
        Cursor for pagination. Pass the id of the last record from the
        previous page to fetch the next page. Mutually exclusive with
        ending_before.
      schema:
        type: string
        maxLength: 200
    EndingBefore:
      name: ending_before
      in: query
      required: false
      description: |
        Cursor for reverse pagination. Pass the id of the first record from
        the previous page to fetch the prior page. Mutually exclusive with
        starting_after.
      schema:
        type: string
        maxLength: 200
  securitySchemes:
    ApiKeyAuth:
      type: http
      scheme: bearer
      description: |
        API key issued per entity via Settings > Developers > API Keys.
        Each key carries scopes (e.g. orders:read, products:write).
        Bearer token format: Authorization: Bearer ark_live_ent_<code>_<random>
        Test keys use ark_test_ent_<code>_<random>. Both are issued per entity
        via Settings > Developers > API Keys.

````