What this endpoint does

Searches analyst notes accessible to your API token using flexible filters. All parameters are optional — an empty body returns the most recent notes. Filter by entity (RF entity ID, e.g., ip:8.8.8.8), topic (RF topic ID from Analyst Notes: Available Topics), title (keyword match), label, source (RF source ID), and published (relative time string like -7d or -24h). For entity serialization levels see Analyst Notes: Serialization Options.

Response data

Returns matching analyst notes with their full analytical content — title, body text, topic classification, and tagged entities. Paginated; pass the opaque next_offset token from each response as the from parameter to fetch the next page. The limit plus from offset cannot exceed 1,000, so deep pagination beyond that ceiling is not supported. The corpus contains over 170,000 notes, so always filter or paginate rather than fetching everything.