List the caller's notes. folder_id="" lists notes with no folder; omit it to list across all folders. status is "active" or "trashed". tags filters to notes with any of them, or every one of them with tag_match="all". Locked notes are included but their body is withheld (null).

Get a single note by id. Fails with 403 if it isn't owned by the caller, 404 if it doesn't exist.

Full-text search over the caller's active notes' titles and body text, optionally only within notes carrying any of tags (every one with tag_match="all"). Locked notes only match on title (their body is never substring-matched, so a search hit can't leak hidden content).

Aggregate stats: total active notes, total storage bytes used, pinned-note count, and a created-at histogram by day.

List notes that link to note_id, each with an id/title/snippet. Fails with 403 if note_id isn't owned by the caller, 404 if it doesn't exist.

Tag/link-similarity "you might want to link these" suggestions for note_id: other notes/canvases ranked by a similarity score, with the tags they share. Requires a Pro plan, same gate as note_graph/ note_backlinks. Fails with 403 if note_id isn't owned by the caller, 404 if it doesn't exist.

Local link graph centered on note_id: nodes (id/title/locked) and edges (source -> target) for its direct links and backlinks. hops=1 is direct neighbors only; hops=2 also expands each neighbor's own neighbors one level further.

Whole-account link graph, paginated: nodes and edges across every note that has at least one link (in or out) or is locked. Pass the response's next_cursor back in to fetch the next page; None means the graph is exhausted. Requires a Pro plan, same gate as the web app's Global Graph feature.

Community detection + importance ranking over the caller's whole account graph. community_algo: "louvain" (default), "label_propagation", "greedy_modularity", or "connected_components". centrality_algo: "pagerank" (default), "betweenness", "degree", or "closeness". Requires a Pro plan, same gate as get_global_note_graph. On a very large graph the response may note that a cheaper approximation was substituted for the exact algorithm requested.

A single note rendered as a standalone Markdown file (title as an H1, followed by the body). A locked note's body can't be exported without its password -- returns just the title with a note explaining why. Fails with 403/404 same as get_note.

Bulk export of the caller's active notes -- for backups/scripting, not paged browsing (use list_notes for that). format="ndjson" (default) returns one full note object per line; format="markdown" returns one "# Title" block per note, concatenated into a single document. Locked notes are included with their body withheld, same as list_notes.

List a note's file attachments. Fails with 403 if note_id isn't owned by the caller, 404 if it doesn't exist.

A short-lived signed URL to download one attachment's file bytes directly (not through this tool) -- expires_in seconds from now. A ZK/ Vault/lock-encrypted note's attachment is still opaque ciphertext at that URL; there's no decrypt path here, same as a locked note's body.

List who a note (owned by the caller) has been shared with.

List notes that have been shared with the caller by someone else (received copies), most recently shared first.

List the caller's notebooks/folders.

Get a single folder by id.

List every tag used across the caller's active notes.

Every tag with how many active notes and canvases carry it, most-used first.

Get the caller's Team-plan organization: name, plan tier, seat allocations, member count, and any active alerts. 404s if the caller doesn't belong to a Team-plan organization.

List the caller's organization's members. A plain member sees only their own entry -- other members' emails/names/roles are admin/owner- only information, scoped the same way the web app scopes it.