> This page is for API, version 2026-01-01 (Stable) (default).
> For other versions, use one of these documentation indexes:
> - 2026-01-01 (Stable) (default): https://docs.deel.wtf/api/stable/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.deel.wtf/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.deel.wtf/_mcp/server.

# List the private note of a job

GET https://api.letsdeel.com/rest/ats/jobs/{job_id}/notes

Reads the job's private note, which the hiring team shares to keep context about the job. Read it before adding to the note, so the addition can be confirmed against its current content.

 **Token scopes**: `ats:read`, `worker:read`

 **Beta**: this version requires the `X-Beta: true` request header and its contract may change before it is promoted to stable. It is scheduled to become stable on 2027-01-29.

Reference: https://docs.deel.wtf/api/reference/endpoints/ats/list-job-private-notes-v-2026-10-29

## Authentication

- `Authorization` header (bearer token, required) — ## Authentication The Deel API uses bearer tokens to authenticate requests. All API calls must be made over HTTPS — calls over plain HTTP or without authentication will fail. ```curl curl -X GET 'https://api.deel.training/rest/v2/contracts' \ -H 'Authorization: Bearer YOUR-TOKEN-HERE' ``` [Learn more about authentication](/api/authentication)
- `Authorization` header (bearer token, required) — Standard OAuth2 security scheme based on https://swagger.io/docs/specification/authentication/

## Servers

- `https://api.letsdeel.com/rest` (Production, default)
- `https://api-staging.letsdeel.com/rest` (Demo)

## Request

### Path parameters

- `job_id` (string, required) — ID of the job

### Headers

- `X-Beta` (enum, required, default: true) — Opts in to the beta version of this endpoint. Must be `true`.
  - Allowed values: `true`

## Response

### 200

The private note of the job

- `data` (list of AtsJobsJobIdNotesGetResponsesContentApplicationJsonSchemaDataItems, required) — The private note of the job, or an empty list when the job has none. A job has at most one note.
- `has_more` (boolean, required) — Always false: a job has at most one note.
- `next_cursor` (string, required, nullable) — Always null: a job has at most one note.
- `total_count` (integer, required) — Number of notes on the job (0 or 1).

## Errors

### 400 Bad Request Error

Operation failed.

- `errors` (list of AtsJobsJobIdNotesGetResponsesContentApplicationJsonSchemaErrorsItems, required) — List of error objects

### 401 Unauthorized Error

Operation failed.

- `request` (ApiErrorRequest, optional)
- `errors` (list of ApiError, optional)

### 403 Forbidden Error

Forbidden. ATS is not enabled for this organization or insufficient permissions.

- `errors` (list of AtsJobsJobIdNotesGetResponsesContentApplicationJsonSchemaErrorsItems, required) — List of error objects

### 404 Not Found Error

Not found, or not visible to the authenticated user. The two cases are indistinguishable.

- `errors` (list of AtsJobsJobIdNotesGetResponsesContentApplicationJsonSchemaErrorsItems, required) — List of error objects

### 500 Internal Server Error

Operation failed.

- `errors` (list of AtsJobsJobIdNotesGetResponsesContentApplicationJsonSchemaErrorsItems, required) — List of error objects

## Types

### AtsJobsJobIdNotesGetResponsesContentApplicationJsonSchemaDataItems

- `id` (string, required) — The unique identifier of the job note
- `created_at` (string, required) — The timestamp when the note was created
- `updated_at` (string, required) — The timestamp when the note was last changed
- `richtext_content` (string, required) — The content of the note in rich text HTML format
- `created_by_hris_organization_user_id` (string, required, nullable) — HRIS organization user ID of the user who created the note
- `updated_by_hris_organization_user_id` (string, required, nullable) — HRIS organization user ID of the user who last changed the note

### AtsJobsJobIdNotesGetResponsesContentApplicationJsonSchemaErrorsItems

- `code` (string, required) — Machine-readable error code
- `message` (string, required) — Human-readable error message
- `field` (string, optional) — Request field related to the error, if applicable

### ApiErrorRequest

- `method` (string, optional) — The HTTP method of the failed request
- `url` (string, optional) — The relative URL of the failed request
- `status` (double, optional) — The status code of the response
- `api_req_id` (string, optional) — The request ID of the failed request
- `docs` (string, optional) — A link to the official documentation for the requested endpoint resource
- `source` (string, optional) — The source handler which produced the returned error
- `code` (double, optional) — The code of the source handler which produced the returned error

### ApiError

- `message` (string, optional) — A description of the returned error
- `path` (string, optional) — The JSON path where input validation failed

## Examples

**Response**

```json
{
  "data": [
    {
      "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "created_at": "2026-10-23T10:30:00.000Z",
      "updated_at": "2026-10-23T10:30:00.000Z",
      "richtext_content": "<p>Hiring manager prefers candidates who can start before March.</p>",
      "created_by_hris_organization_user_id": "123e4567-e89b-12d3-a456-426614174000",
      "updated_by_hris_organization_user_id": "123e4567-e89b-12d3-a456-426614174000"
    }
  ],
  "has_more": false,
  "next_cursor": "string",
  "total_count": 1
}
```

**SDK Code**

```python
import requests

url = "https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes"

headers = {
    "X-Beta": "true",
    "Authorization": "Bearer <token>"
}

response = requests.get(url, headers=headers)

print(response.json())
```

```javascript
const url = 'https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes';
const options = {method: 'GET', headers: {'X-Beta': 'true', Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-Beta", "true")
	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-Beta"] = 'true'
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body
```

```java
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.get("https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes")
  .header("X-Beta", "true")
  .header("Authorization", "Bearer <token>")
  .asString();
```

```php
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('GET', 'https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes', [
  'headers' => [
    'Authorization' => 'Bearer <token>',
    'X-Beta' => 'true',
  ],
]);

echo $response->getBody();
```

```csharp
using RestSharp;

var client = new RestClient("https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes");
var request = new RestRequest(Method.GET);
request.AddHeader("X-Beta", "true");
request.AddHeader("Authorization", "Bearer <token>");
IRestResponse response = client.Execute(request);
```

```swift
import Foundation

let headers = [
  "X-Beta": "true",
  "Authorization": "Bearer <token>"
]

let request = NSMutableURLRequest(url: NSURL(string: "https://api.letsdeel.com/rest/ats/jobs/faac641e-a484-4875-aed5-bfcb0a0691a0/notes")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "GET"
request.allHTTPHeaderFields = headers

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```