> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coverwhale.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Post a Public Reply

> Post a public reply / note back onto a submission — the inbound counterpart to the outbound `submission.public_reply` webhook. The note is recorded on the submission and is visible to Cover Whale staff on the account's Notes tab; it does not trigger a webhook back to you.

Scoped to the calling partner's own submissions. A display ID that does not exist, or that belongs to another company, returns `404` — existence is never revealed to a non-owner.



## OpenAPI

````yaml post /submission/{displayId}/public-reply
openapi: 3.0.0
info:
  title: Cover Whale API V1
  contact:
    name: Cover Whale API Team
  version: '1.0'
servers:
  - url: https://api.coverwhale.dev/v1
security:
  - AccessToken: []
tags:
  - name: Authentication
    description: Authenticating & Interacting with the API
paths:
  /submission/{displayId}/public-reply:
    post:
      tags:
        - Submissions
      summary: Post a Public Reply
      description: >-
        Post a public reply / note back onto a submission — the inbound
        counterpart to the outbound `submission.public_reply` webhook. The note
        is recorded on the submission and is visible to Cover Whale staff on the
        account's Notes tab; it does not trigger a webhook back to you.


        Scoped to the calling partner's own submissions. A display ID that does
        not exist, or that belongs to another company, returns `404` — existence
        is never revealed to a non-owner.
      operationId: postSubmissionPublicReply
      parameters:
        - name: Content-Type
          in: header
          required: true
          schema:
            type: string
          example: application/json
        - name: Accept
          in: header
          required: true
          schema:
            type: string
          example: application/json
        - name: AccessToken
          in: header
          required: true
          schema:
            type: string
          example: eyJraWQiOiJnRk5oTTh2RnRKWXVDVXU1S........
        - name: displayId
          in: path
          description: Submission display ID
          required: true
          schema:
            type: string
          example: '2261310'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              properties:
                content:
                  description: >-
                    The reply text to record on the submission. Required, up to
                    5000 characters. HTML is sanitized on write.
                  type: string
                  example: Please add the trailer VIN 1UYVS2538 to this policy.
              required:
                - content
              type: object
      responses:
        '201':
          description: Reply recorded
          content:
            application/json:
              schema:
                properties:
                  status:
                    type: string
                    example: success
                  note_id:
                    type: integer
                    example: 987654
                type: object
        '404':
          description: Submission not found, or not owned by the calling partner
          content:
            application/json:
              schema:
                properties:
                  error:
                    type: string
                type: object
                example:
                  error: Submission not found
        '422':
          description: Validation error (e.g. missing or empty content)
          content:
            application/json:
              schema:
                properties:
                  message:
                    type: string
                  errors:
                    type: object
                type: object
                example:
                  message: The content field is required.
                  errors:
                    content:
                      - The content field is required.
components:
  securitySchemes:
    AccessToken:
      type: apiKey
      description: >-
        AWS Cognito access token obtained from the /authentication endpoint.
        Token expires after 3600 seconds.
      name: AccessToken
      in: header

````