What this endpoint does

Retrieves complete content and metadata for a specific analyst note by its ID (format doc:XXXXXX — include the doc: prefix). Only returns notes that are published and accessible to the calling API token. Use Analyst Notes: Search to discover note IDs. The optional request body controls entity serialization level (full, min, or id — see Analyst Notes: Serialization Options) and whether to include HTML-tagged text or escape HTML entities.

Response data

Returns the note's full analytical content — title, body text, the topic classification, and the entities the analyst tagged as relevant (both note-scoped and contextual). When the note has a file attachment (YARA rules, IOC lists, etc.), the attachment field in attributes carries the original filename — use Analyst Notes: Attachment to download the binary. The response is a single object, not wrapped in a data array.