diff --git a/src/api/router/auth.rs b/src/api/router/auth.rs
index b4afef0d3..cac270ee0 100644
--- a/src/api/router/auth.rs
+++ b/src/api/router/auth.rs
@@ -261,9 +261,11 @@ async fn check<R: IncomingRequest<Authentication = Self> + Any>(
 			})?;
 
 		if let Some(authentication) = authentication {
-			check_access_token(services, &authentication, query, TypeId::of::<R>(), &[])
-				.await
-				.map(Some)
+			check_access_token(services, &authentication, query, TypeId::of::<R>(), &[
+				OAuthClientScope::ApiFullAccess,
+			])
+			.await
+			.map(Some)
 		} else {
 			Ok(None)
 		}