diff --git a/cmd/gitea-mcp/main.go b/cmd/gitea-mcp/main.go
index 774f28e..f2a16c5 100644
--- a/cmd/gitea-mcp/main.go
+++ b/cmd/gitea-mcp/main.go
@@ -5,6 +5,7 @@ import (
 	"net/http"
 	"os"
 
+	"gitea.d-ma.be/mathias/gitea-mcp/internal/auth"
 	"gitea.d-ma.be/mathias/gitea-mcp/internal/config"
 	"gitea.d-ma.be/mathias/gitea-mcp/internal/mcp"
 	"gitea.d-ma.be/mathias/gitea-mcp/internal/registry"
@@ -28,7 +29,7 @@ func main() {
 	})
 
 	mux := http.NewServeMux()
-	mux.Handle("/mcp", mcp.OriginAllowlist(cfg.OriginAllowlist)(mcpSrv))
+	mux.Handle("/mcp", mcp.OriginAllowlist(cfg.OriginAllowlist)(auth.CallerMiddleware(mcpSrv)))
 	mux.HandleFunc("/healthz", func(w http.ResponseWriter, _ *http.Request) {
 		w.WriteHeader(http.StatusOK)
 		_, _ = w.Write([]byte("ok"))