List document comments

GET/api/v1/documents/{ref}/comments

This endpoint isn’t available for live testing.

curl 'https://app.quote.cloud/api/v1/documents/{ref}/comments?client_id=<your client id>' \
  -H 'Authorization: Bearer <your token>'

<your token> and <your client id> are placeholders. Get your own

Inputs

refrequiredThe document’s number, shown as #1234 in the ID column of your documents list and beside the title in the editor. Enter it without the #. In API responses it’s displayId.

client_idrequiredYou don’t need to enter this here. In your own code, use the Client ID from your OAuth client. How to get one

statusOnly comments with this status.

cursorWhere the next page starts. Leave this out for the first page, then send meta.nextCursor from the previous response.

limitHow many results to return per page, up to 100.

Not sure what to enter? Here’s where to find IDs

Example response

{
  "data": [
    {
      "id": "string",
      "commentRef": "string",
      "documentId": "string",
      "documentRef": "string",
      "body": "string",
      "status": "open",
      "authorId": "string",
      "authorName": "string",
      "authorEmail": "string",
      "createdAt": "2026-01-31T09:30:00Z",
      "updatedAt": "2026-01-31T09:30:00Z",
      "resolvedAt": "2026-01-31T09:30:00Z"
    }
  ],
  "pagination": {
    "continueCursor": "string",
    "isDone": true
  }
}

The spec has no example, so this 200 response is generated from the schema. Values are placeholders.

List document comments

Permission

An OAuth access token with this scope. How to get a token

comments:read

Read document comments.

Parameters

Not sure what to enter? Here’s where to find IDs.

refpath · stringrequired

The document’s number, shown as #1234 in the ID column of your documents list and beside the title in the editor. Enter it without the #. In API responses it’s displayId.Matches ^\d+$.

client_idquery · stringrequired

The Client ID of your OAuth client. It’s public, and goes on every request alongside your access token. Find it in QuoteCloud under Settings → API dashboard → Manage Integrations → OAuth Clients.Length at least 1.

statusquery · string

Only comments with this status.One of open, resolved.

cursorquery · string or null

Where the next page starts. Leave this out for the first page, then send meta.nextCursor from the previous response.

limitquery · integer

How many results to return per page, up to 100.Default 25. Value 1 to 100.

Responses

200Comment page.

dataarray of objectrequired

Item fields

idstringrequired

commentRefstringrequired

documentIdstringrequired

documentRefstring or nullrequired

bodystringrequired

statusstringrequired

One of open, resolved.

authorIdstringrequired

authorNamestringrequired

authorEmailstringrequired

createdAtstring (date-time)required

updatedAtstring (date-time)required

resolvedAtstring (date-time) or nullrequired

paginationobjectrequired

Fields

continueCursorstring or nullrequired

isDonebooleanrequired

401Missing or invalid bearer token or client ID.

errorstringrequired

error_descriptionstring

403Insufficient scope, missing add-on, usage limit, or permission denial.

Exactly one of these:

OAuthError

errorstringrequired

error_descriptionstring

ApiErrorEnvelope

dataobjectrequired

Fields

statusstringrequired

Always error.

messagestringrequired

codestring

documentRefstring

assetGenerationIdstring

errorsarray of object

Item fields

fieldstringrequired

messagestringrequired

404Requested resource was not found in the token's company.

dataobjectrequired

Fields

statusstringrequired

Always error.

messagestringrequired

codestring

documentRefstring

assetGenerationIdstring

errorsarray of object

Item fields

fieldstringrequired

messagestringrequired

Rate limit

120 requests a minute per company, shared across REST, Zapier and MCP. On a 429, wait for Retry-After.