diff --git a/routes/api.php b/routes/api.php
index eb83b32..9406cf6 100644
--- a/routes/api.php
+++ b/routes/api.php
@@ -556,8 +556,8 @@
             Route::delete('/common/{id}', [CommonController::class, 'destroy'])->name('v1.settings.common.destroy'); // 공통 코드 삭제
         });
 
-        // Push Notification API (FCM 푸시 알림)
-        Route::prefix('push')->group(function () {
+        // Push Notification API (FCM 푸시 알림) - auth:sanctum 필수 (tenantId, apiUserId 필요)
+        Route::prefix('push')->middleware('auth:sanctum')->group(function () {
             Route::post('/register-token', [PushNotificationController::class, 'registerToken'])->name('v1.push.register-token');           // FCM 토큰 등록
             Route::post('/unregister-token', [PushNotificationController::class, 'unregisterToken'])->name('v1.push.unregister-token');     // FCM 토큰 해제
             Route::get('/tokens', [PushNotificationController::class, 'getTokens'])->name('v1.push.tokens');                                 // 등록된 토큰 목록