diff --git a/backend/src/controllers/rest/PaymentController.ts b/backend/src/controllers/rest/PaymentController.ts
index 4ce6fae..ceaed92 100644
--- a/backend/src/controllers/rest/PaymentController.ts
+++ b/backend/src/controllers/rest/PaymentController.ts
@@ -56,6 +56,7 @@ export class PaymentController {
   @Summary("Get available token packages for purchase")
   @Description("Returns all active token packages that users can purchase")
   @Returns(200, Array).Description("List of available token packages")
+  @Security() // No authentication required
   async getTokenPackages() {
     const connection = await pool.getConnection();