diff --git a/backend/api/middleware.go b/backend/api/middleware.go
index 0571368..991a406 100644
--- a/backend/api/middleware.go
+++ b/backend/api/middleware.go
@@ -129,8 +129,10 @@ func hasAPIKeyPermission(key *db.APIKey, r *http.Request) bool {
 
 	switch perm {
 	case "agent":
-		// Nur Agent-Endpunkte: WS-Connect und Heartbeat
-		return path == "/api/v1/agent/ws" || path == "/api/v1/agent/heartbeat"
+		// Nur Agent-Endpunkte: Registrierung, WS-Connect, Heartbeat
+		return path == "/api/v1/agent/ws" ||
+			path == "/api/v1/agent/heartbeat" ||
+			path == "/api/v1/agent/register"
 
 	case "read":
 		// Nur GET-Requests, keine destruktiven Aktionen