What this endpoint does

Retrieves a single analyst note by its ID (e.g., doc:wB0Rhk). The optional serialization parameter controls how much detail is returned — see Analyst Notes: Serialization Options for levels. The request body is optional; pass {"serialization": "full"} to include resolved events and diamond model data, or omit the body for the default serialization.

Response data

The complete note object with id, source, and attributes containing title, text, publication date, note entities (tagged in the note), context entities (mentioned but not tagged), topic classification, and validation URLs. With full serialization, you also get events (structured cyber attack events, geopolitical events, etc.) and diamond_model classification.