---
title: "Set Meeting Sensitivity"
method: PATCH
path: "/inbox/meetings/{meeting_id}/sensitivity"
tags: ["AI Inbox"]
---

# Set Meeting Sensitivity

`PATCH /inbox/meetings/{meeting_id}/sensitivity`

## Request

- Base URL: `https://be.graph8.com/api/v1`
- URL: `https://be.graph8.com/api/v1/inbox/meetings/{meeting_id}/sensitivity`
- Auth: HTTP bearer

CHANGE WHO MAY READ THE RECORDING OF THIS MEETING.

`private` HIDES the transcript from everyone except the meeting's
participants. `normal` EXPOSES it to the organisation again - and a
transcript that has been read cannot be un-read, so going back to `normal`
is not a reversible edit in any sense that matters.

Only a PARTICIPANT may change it; anyone else gets a 403. Classified
`destructive`, so it needs `inbox:delete` rather than riding along with
`inbox:write` - a key that triages the inbox should not also be able to
publish a private recording.

`sensitivity` is REQUIRED here. The app defaults a missing key to
`normal`, which is the exposing direction, so this contract refuses to
guess.

## Path parameters

- `meeting_id` string, required: Meeting id, as returned by `GET /inbox/meetings`.

## Headers

- `Authorization` string, nullable
- `X-Target-Org-Id` string, nullable

## Request body

- MeetingSensitivityRequest: WHO MAY READ THE RECORDING OF THIS MEETING. `private` restricts the transcript to the meeting's participants. `normal` makes it visible to the organisation again - so moving a meeting from `private` back to `normal` EXPOSES a transcript that was restricted, and nobody who reads it in the meantime can be made to un-read it. The app takes a bare `Dict[str, str]` here and defaults a MISSING or misspelled key to `"normal"`. That default is the exposing direction, so this contract makes the value REQUIRED and closed: a typo is a 422 naming both options rather than a silent un-restrict.
  - `sensitivity` 'normal' | 'private', required: `private` = participants only. `normal` = visible to the organisation. Required - there is no safe default.

## Response `200`

Successful Response

- ApiResponseInboxPayload
  - `data` InboxPayload, required: An open envelope for a comment, an assignment or a workspace. Open because a comment carries attachment refs and mention metadata that grow, and because an assignment result reports per-assignee outcomes.
  - `pagination` PaginationMeta
    - `page` integer, required: Current page number (1-indexed)
    - `limit` integer, required: Items per page
    - `total` integer, required: Total number of items
    - `has_next` boolean, required: Whether there are more pages
    - `next_cursor` string, nullable: Opaque cursor for the next page; null when there are no more items. Pass it back as the `cursor` query param to fetch the following page without computing page numbers.
    - `total_available` integer, nullable: Search endpoints only: how many records really match, when known. Can be larger than `total`, which is capped at the 10,000 results that can be paged. For company search this is a distinct-company estimate. Null when unknown; absent outside search.
    - `total_is_lower_bound` boolean, nullable: Search endpoints only: true when more records match than `total` shows (the result set is larger than the 10,000 results that can be paged). Absent outside search.
    - `notes` string[], nullable: Search endpoints only: plain-language notes about the result, e.g. that more records match than can be paged, or that a reversed `between` range was put in order.

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/graph8/apis/graph8-developer-api.md) · [All operations](https://skmtc.dev/graph8/apis/graph8-developer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/graph8/apis/graph8-developer-api/revisions/2e7cfa0ca921?raw)