diff --git a/app.py b/app.py
index 3b89938..610acf3 100644
--- a/app.py
+++ b/app.py
@@ -174,6 +174,7 @@ def notify():
 
 @app.route("/metrics", methods=["GET"])
 def metrics():
+    require_manage_auth()
     session = SessionLocal()
 
     try: