Activity Notes

Base URL: https://api.cornerspot.net

Authentication: requests use a bearer token, for example Authorization: Bearer YOUR_API_KEY.

List an activity's notes

GET /c/api/v1/activities/{activity_id}/notes

Returns a paginated list of notes for the given activity, ordered by pinned desc, then created_at desc. Requires the activities_read scope and the CRM module.

Path parameters

FIELDTYPEDESCRIPTION
activity_idstring · requiredActivity id.

Query parameters

FIELDTYPEDESCRIPTION
pageinteger1-based page number.
per_pageintegerPage size (1–100, default 25).

Code samples

curl --request GET \
  --url 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes' \
  --header 'Authorization: Bearer YOUR_API_KEY'
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

const data = await response.json();
console.log(data);
// Node.js 18+ (native fetch)
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

if (!response.ok) {
  throw new Error(`Request failed: ${response.status}`);
}

const data = await response.json();
console.log(data);
import json
import urllib.request

url = "https://api.cornerspot.net/c/api/v1/activities/abc123/notes"
headers = {
    "Authorization": "Bearer YOUR_API_KEY",
}

request = urllib.request.Request(url, headers=headers, method="GET")

with urllib.request.urlopen(request) as response:
    data = json.loads(response.read().decode("utf-8"))
    print(data)
require "json"
require "net/http"

uri = URI("https://api.cornerspot.net/c/api/v1/activities/abc123/notes")

request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer YOUR_API_KEY"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts JSON.parse(response.body)
<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'GET',
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer YOUR_API_KEY',
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

$data = json_decode($response, true);
print_r($data);

Responses

STATUSDESCRIPTION
200 OKa page of notes
401 Unauthorizedmissing or invalid API key
402 Payment Requiredthe team's plan doesn't include the CRM module
403 Forbiddenthe key lacks the activities_read scope
404 Not Foundno such activity in this team

Add a note to an activity

POST /c/api/v1/activities/{activity_id}/notes

Creates a note on the given activity. The note is automatically associated with the current API key's user. Requires activities_write and the CRM module.

Path parameters

FIELDTYPEDESCRIPTION
activity_idstring · requiredActivity id.

Request body

FIELDTYPEDESCRIPTION
noteobject
note.bodystring · requiredRequired — the note body.
note.titlestring
note.pinnedboolean
note.tag_ids[]array of stringTag ids to attach to the note.

Code samples

curl --request POST \
  --url 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes' \
  --header 'Content-Type: application/json' \
  --header 'Authorization: Bearer YOUR_API_KEY' \
  --data '{
  "note": {
    "body": "string",
    "title": "string",
    "pinned": true,
    "tag_ids": [
      "abc123"
    ]
  }
}'
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': 'Bearer YOUR_API_KEY'
  },
  body: JSON.stringify({
    "note": {
      "body": "string",
      "title": "string",
      "pinned": true,
      "tag_ids": [
        "abc123"
      ]
    }
  })
});

const data = await response.json();
console.log(data);
// Node.js 18+ (native fetch)
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': 'Bearer YOUR_API_KEY'
  },
  body: JSON.stringify({
    "note": {
      "body": "string",
      "title": "string",
      "pinned": true,
      "tag_ids": [
        "abc123"
      ]
    }
  })
});

if (!response.ok) {
  throw new Error(`Request failed: ${response.status}`);
}

const data = await response.json();
console.log(data);
import json
import urllib.request

url = "https://api.cornerspot.net/c/api/v1/activities/abc123/notes"
payload = json.dumps({
  "note": {
    "body": "string",
    "title": "string",
    "pinned": true,
    "tag_ids": [
      "abc123"
    ]
  }
}).encode("utf-8")
headers = {
    "Content-Type": "application/json",
    "Authorization": "Bearer YOUR_API_KEY",
}

request = urllib.request.Request(url, data=payload, headers=headers, method="POST")

with urllib.request.urlopen(request) as response:
    data = json.loads(response.read().decode("utf-8"))
    print(data)
require "json"
require "net/http"

uri = URI("https://api.cornerspot.net/c/api/v1/activities/abc123/notes")

request = Net::HTTP::Post.new(uri)
request["Content-Type"] = "application/json"
request["Authorization"] = "Bearer YOUR_API_KEY"
request.body = JSON.generate({
  "note": {
    "body": "string",
    "title": "string",
    "pinned": true,
    "tag_ids": [
      "abc123"
    ]
  }
})

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts JSON.parse(response.body)
<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'Authorization: Bearer YOUR_API_KEY',
    ],
    CURLOPT_POSTFIELDS => json_encode([
    'note' => [
        'body' => 'string',
        'title' => 'string',
        'pinned' => true,
        'tag_ids' => [
            'abc123',
        ],
    ],
]),
]);

$response = curl_exec($curl);
curl_close($curl);

$data = json_decode($response, true);
print_r($data);

Responses

STATUSDESCRIPTION
201 Creatednote created
401 Unauthorizedmissing or invalid API key
402 Payment Requiredthe team's plan doesn't include the CRM module
403 Forbiddenthe key lacks the activities_write scope
404 Not Foundno such activity in this team
422 Unprocessable Contentvalidation error — body is blank

Get an activity note

GET /c/api/v1/activities/{activity_id}/notes/{id}

Fetches a single note belonging to the given activity. Requires activities_read and the CRM module.

Path parameters

FIELDTYPEDESCRIPTION
activity_idstring · requiredActivity id.
idstring · requiredNote id.

Code samples

curl --request GET \
  --url 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123' \
  --header 'Authorization: Bearer YOUR_API_KEY'
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

const data = await response.json();
console.log(data);
// Node.js 18+ (native fetch)
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

if (!response.ok) {
  throw new Error(`Request failed: ${response.status}`);
}

const data = await response.json();
console.log(data);
import json
import urllib.request

url = "https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123"
headers = {
    "Authorization": "Bearer YOUR_API_KEY",
}

request = urllib.request.Request(url, headers=headers, method="GET")

with urllib.request.urlopen(request) as response:
    data = json.loads(response.read().decode("utf-8"))
    print(data)
require "json"
require "net/http"

uri = URI("https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123")

request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer YOUR_API_KEY"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts JSON.parse(response.body)
<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'GET',
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer YOUR_API_KEY',
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

$data = json_decode($response, true);
print_r($data);

Responses

STATUSDESCRIPTION
200 OKthe note
401 Unauthorizedmissing or invalid API key
402 Payment Requiredthe team's plan doesn't include the CRM module
403 Forbiddenthe key lacks the activities_read scope
404 Not Foundno such note (or activity) in this team

Delete an activity note

DELETE /c/api/v1/activities/{activity_id}/notes/{id}

Soft-deletes the note. The note is hidden from all future requests but retained for audit purposes. Requires activities_write and the CRM module.

Path parameters

FIELDTYPEDESCRIPTION
activity_idstring · requiredActivity id.
idstring · requiredNote id.

Code samples

curl --request DELETE \
  --url 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123' \
  --header 'Authorization: Bearer YOUR_API_KEY'
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123', {
  method: 'DELETE',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

const data = await response.json();
console.log(data);
// Node.js 18+ (native fetch)
const response = await fetch('https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123', {
  method: 'DELETE',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY'
  }
});

if (!response.ok) {
  throw new Error(`Request failed: ${response.status}`);
}

const data = await response.json();
console.log(data);
import json
import urllib.request

url = "https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123"
headers = {
    "Authorization": "Bearer YOUR_API_KEY",
}

request = urllib.request.Request(url, headers=headers, method="DELETE")

with urllib.request.urlopen(request) as response:
    data = json.loads(response.read().decode("utf-8"))
    print(data)
require "json"
require "net/http"

uri = URI("https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123")

request = Net::HTTP::Delete.new(uri)
request["Authorization"] = "Bearer YOUR_API_KEY"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts JSON.parse(response.body)
<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.cornerspot.net/c/api/v1/activities/abc123/notes/abc123',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'DELETE',
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer YOUR_API_KEY',
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

$data = json_decode($response, true);
print_r($data);

Responses

STATUSDESCRIPTION
204 No Contentdeleted
401 Unauthorizedmissing or invalid API key
402 Payment Requiredthe team's plan doesn't include the CRM module
403 Forbiddenthe key lacks the activities_write scope
404 Not Foundno such note (or activity) in this team

Was this article helpful?