In Claap application, the ability to access a recording depends on a lot of factors: is the user assigned to the recording, are they part of a team giving them access, is the recording public, etc. Since API requests do not impersonate workspace users, the rules are a bit different, and depend on whether the API key has Full access.

Default keys

A recording can be retrieved by the API if:

The recording can be accessed by workspace members and is visible in global search.
The recording folder (aka channel) can be accessed by workspace members and is visible in global search.

Private recordings are not returned: they are left out of listings, and retrieving one fails with a not_found error.

Full access keys

A key with Full access can retrieve every recording of the workspace, private ones included. Full access is turned on per key in Settings > API & Webhooks, and only workspace Owners can turn it on. Webhooks have the same setting: a webhook with full access is also notified about private recordings.