Fathom automation · runs weekly
Restrict Fathom call share links to people you added
A Fathom recording of a client call can be open to anyone who holds its address, and the setting is chosen call by call. Months later, nobody knows which links are still wide open.
Cotlet does it in your own Fathom account with list_calls, get_call_sharing and set_link_access, called by your AI agent, an n8n workflow or a script.
Hosted · nothing to install or maintain
Can Fathom do this on its own?
Fathom has no bulk change for link access and no API for sharing (checked 22 Oct 2026). The API has a read-only shared_with field showing the team scope of a call, the settings page changes the default for new calls only, and neither the API reference nor the MCP overview lists a way to change link access on an existing call.
How you do it in Fathom today
- You open a call and click Share below the meeting title. To the left of Copy Link you pick Anyone with the link can view, Anyone on the same domain as you can view, or Only people added can view.
- On an Individual or Free plan the link sent to attendees is set to Anyone with the link by default, so you change it for each recording you want to restrict.
- On a Team plan the Default Share Link Access setting decides new calls. If it says Anyone with the link, attendees can forward the link and anyone holding it can open the recording.
- To cut one person off, you click Remove next to their email in the sharing details. Fathom has no way to unsend a recording already shared by email.
How to restrict Fathom call share links to people you added
List my Fathom calls from the last 30 days that anyone with the link can open. Set them to only people added, except calls with the meeting type Public webinar, and tell me who stays on each. - 01
Find the exposed calls
The agent lists the window with list_calls, 30 days unless you say more, and checks each call with get_call_sharing. It keeps calls whose link_access is anyone_with_link, because same_domain and only_people_added are already tight.
- 02
Apply your exceptions
Calls you named as public, for example a meeting type called Public webinar or titles with a prefix, are skipped. The agent states each skipped call and the rule that skipped it, so a public call never gets locked by mistake.
- 03
Read who is on the list
Before changing a call, it keeps the people list from get_call_sharing. Switching to only_people_added leaves added people in place, so the report shows who still has access afterwards.
- 04
Switch the link
set_link_access sets only_people_added on each remaining call. It waits for your OK by default, because a link a customer relies on stops working for people who were not added.
- 05
Check the result
The agent reads get_call_sharing again for each changed call and reports any call where the setting did not stick, for example one where your role cannot see the sharing details.
What you get back
Calls in the last 30 days: 41
Open to anyone with the link: 17
Restricted 14, e.g. "Q4 pricing review" (3 people added)
Skipped 2 (meeting type Public webinar)
Not changed 1: "Vendor onboarding sync", sharing details hidden at Limited access Other ways to ask
- Run on the 1st of every month and restrict last month's calls recorded with external attendees.
- Only report calls open to anyone with the link, with who is added, and change nothing.
- Set same_domain, not only people added, for calls recorded by my team this quarter.
What Fathom allows, and what to know first
- Fathom's three link choices are Anyone with the link can view, Anyone on the same domain as you can view and Only people added can view.
- Fathom documents three access levels for a person on a call: Limited sees transcript, summary and recording, Standard also downloads and sees highlights and action items, and Admin also shares and trims.
- Auto-share sends the summary or recording to every attendee on the calendar invite, including people who did not attend, so the link reaches them before you act.
- On a Team plan, a call set to Anyone with the link stays open to everyone holding it, including people attendees forward it to.
set_link_access asks for your OK by default. To run it weekly without you, switch confirmation off for that tool in your dashboard.
Sources: Fathom Help: Sharing Call Recordings · Fathom Help: How Does Fathom Auto-Share Recordings and Summaries with Attendees? · Fathom Help: Release Notes · Fathom Help: Fathom MCP, Connect Claude and ChatGPT
Call set_link_access from a script
curl -X PUT https://cotlet.dev/api/v1/fathom-video/calls/610313346/link-access \
-H "Authorization: Bearer $COTLET_API_KEY" \
-H "Content-Type: application/json" \
-d '{"link_access":"only_people_added"}' {
"call_id": "610313346",
"link_access": "only_people_added",
"previous": "anyone_with_link"
} MCP: add https://cotlet.dev/mcp/v1 with the same key; the call is fathom_video_write → set_link_access. Example data.
Schedule it in n8n, Make, Zapier or cronFathom tools this automation uses
| Tool | Parameters |
|---|---|
| list_calls | scope, created_after, created_before, meeting_type, cursor |
| get_call_sharing | call_id |
| set_link_access | call_id, link_access |
Frequently asked questions
Is it safe to connect Fathom to Cotlet?
Yes. You sign in to Fathom yourself, in your own Cloud Browser in the EU, and we never save your password. Your agents only get Fathom once you enable it, every background request is listed, and the browser profile is stored encrypted with AES-256-GCM, the cipher 1Password uses for its vaults. The AI model never sees a login, posts and messages wait for your OK, and Disable for agents cuts access in one click. Independent scanners grade cotlet.dev A+ on Qualys SSL Labs, securityheaders.com and Mozilla Observatory; live results are on https://cotlet.dev/security.
Give your agent access to Fathom.
Free 7-day trial with 2,000 credits, no card needed. Cotlet is independent and not affiliated with Fathom.