diff --git a/backend/api/middleware.go b/backend/api/middleware.go
index 1445267..2f43ab6 100644
--- a/backend/api/middleware.go
+++ b/backend/api/middleware.go
@@ -135,6 +135,7 @@ func hasAPIKeyPermission(key *db.APIKey, r *http.Request) bool {
 			path == "/api/v1/agent/register" ||
 			path == "/api/v1/firmware" ||
 			path == "/api/v1/firmware/download" ||
+			path == "/api/v1/installer/download" ||
 			strings.HasPrefix(path, "/api/v1/agents/")
 
 	case "read":