> ## Documentation Index > Fetch the complete documentation index at: https://docs.anycrm.anyreach.ai/llms.txt > Use this file to discover all available pages before exploring further. # Put Org Settings > Update org-wide settings. Admin only. This route IS the permission check. The 2026-08-18 conversion to a plain upsert kept it that way on purpose: `meeting_org_settings` now grants INSERT/UPDATE to `authenticated`, but the RLS policies only check org scope, not role — a member who reached PostgREST directly could still write the row. require_org_manage here is the only place the Logto role is ever checked, same as when this went through the RPC. `email_domains` (an `organizations` column) rides the same gate for the same reason: that table's RLS is `org_isolation` only, no role check either. ## OpenAPI ````yaml /openapi-generated.json put /meetings/settings/org openapi: 3.1.0 info: title: anycrm-api version: 0.0.1 servers: [] security: [] tags: - name: Customer Intelligence description: >- Company research and ICP-fit scoring — create a research run, track its progress, and read back scored companies as leads. - name: Outreach description: >- The cold-email management console — domains, mailboxes, and campaigns — as a thin control plane over the SalesForge stack. - name: AnyCard description: >- Authenticated CRUD for AnyCard, the org's digital business-card / lead-capture product. - name: AnyCard Events description: >- Event-attribution analytics for AnyCard — which captured leads converted, broken down by source, owner, and deal. - name: AnyCard Share Links description: >- Unauthenticated endpoints reached by anyone who scans a QR code or opens a shared AnyCard link. - name: AI description: >- A streaming (SSE) AI chat endpoint with account-commit actions it can take on the caller's behalf. - name: Analytics Assistant description: >- The natural-language analytics assistant — a guarded text-to-SQL loop (SSE) that answers ad-hoc questions over the org's CRM data as a least-privilege, read-only database role. - name: Account Readiness description: >- Account Readiness Profiles — AI-scored signals on whether an account is ready for outreach or expansion, computed via a Temporal workflow. - name: Integrations description: >- Pipedream Connect — issuing connect tokens and managing the org's connected third-party accounts. - name: Feedback description: >- User-submitted platform feedback (bug reports, feature requests) — global, not scoped to one organization. - name: Public Media description: >- Unauthenticated image reads for publicly-embeddable assets (card photos, inline email images) — allowlisted by key shape; everything else in the storage bucket stays private. - name: Service Health description: Service liveness. paths: /meetings/settings/org: put: tags: - Meetings summary: Put Org Settings description: |- Update org-wide settings. Admin only. This route IS the permission check. The 2026-08-18 conversion to a plain upsert kept it that way on purpose: `meeting_org_settings` now grants INSERT/UPDATE to `authenticated`, but the RLS policies only check org scope, not role — a member who reached PostgREST directly could still write the row. require_org_manage here is the only place the Logto role is ever checked, same as when this went through the RPC. `email_domains` (an `organizations` column) rides the same gate for the same reason: that table's RLS is `org_isolation` only, no role check either. operationId: put_org_settings_meetings_settings_org_put requestBody: content: application/json: schema: $ref: '#/components/schemas/OrgSettingsPatch' required: true responses: '200': description: Successful Response content: application/json: schema: additionalProperties: true type: object title: Response Put Org Settings Meetings Settings Org Put '422': description: Validation Error content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' security: - HTTPBearer: [] components: schemas: OrgSettingsPatch: properties: attend_external: anyOf: - type: boolean - type: 'null' title: Attend External attend_internal: anyOf: - type: boolean - type: 'null' title: Attend Internal ask_each_time: anyOf: - type: boolean - type: 'null' title: Ask Each Time brief_lead_minutes: anyOf: - type: integer - type: 'null' title: Brief Lead Minutes preselect_confidence: anyOf: - type: number - type: 'null' title: Preselect Confidence retention_days: anyOf: - type: integer - type: 'null' title: Retention Days manager_can_view: anyOf: - type: boolean - type: 'null' title: Manager Can View recording_kill_switch: anyOf: - type: boolean - type: 'null' title: Recording Kill Switch monthly_meeting_cap: anyOf: - type: integer - type: 'null' title: Monthly Meeting Cap max_concurrent_captures: anyOf: - type: integer - type: 'null' title: Max Concurrent Captures leave_if_alone_seconds: anyOf: - type: integer - type: 'null' title: Leave If Alone Seconds adhoc_join_enabled: anyOf: - type: boolean - type: 'null' title: Adhoc Join Enabled attendee_recap_enabled: anyOf: - type: boolean - type: 'null' title: Attendee Recap Enabled brief_notify_viewers: anyOf: - type: boolean - type: 'null' title: Brief Notify Viewers brief_reminder_minutes: anyOf: - type: integer - type: 'null' title: Brief Reminder Minutes brief_internal_enabled: anyOf: - type: boolean - type: 'null' title: Brief Internal Enabled email_domains: anyOf: - items: type: string type: array - type: 'null' title: Email Domains type: object title: OrgSettingsPatch HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' type: array title: Detail type: object title: HTTPValidationError ValidationError: properties: loc: items: anyOf: - type: string - type: integer type: array title: Location msg: type: string title: Message type: type: string title: Error Type type: object required: - loc - msg - type title: ValidationError securitySchemes: HTTPBearer: type: http scheme: bearer ````