diff --git a/app/Http/Controllers/CategorySyncController.php b/app/Http/Controllers/CategorySyncController.php
index 63f2cc2c..fd43da22 100644
--- a/app/Http/Controllers/CategorySyncController.php
+++ b/app/Http/Controllers/CategorySyncController.php
@@ -98,7 +98,7 @@ public function export(Request $request): JsonResponse
     {
         // API Key 검증
         $apiKey = $request->header('X-Menu-Sync-Key');
-        $validKey = config('app.menu_sync_api_key', env('MENU_SYNC_API_KEY'));
+        $validKey = config('app.menu_sync_api_key');
 
         if (empty($validKey) || $apiKey !== $validKey) {
             return response()->json(['error' => 'Unauthorized'], 401);
@@ -125,7 +125,7 @@ public function import(Request $request): JsonResponse
     {
         // API Key 검증
         $apiKey = $request->header('X-Menu-Sync-Key');
-        $validKey = config('app.menu_sync_api_key', env('MENU_SYNC_API_KEY'));
+        $validKey = config('app.menu_sync_api_key');
 
         if (empty($validKey) || $apiKey !== $validKey) {
             return response()->json(['error' => 'Unauthorized'], 401);
diff --git a/app/Http/Controllers/CommonCodeSyncController.php b/app/Http/Controllers/CommonCodeSyncController.php
index 45d63a1f..9bafea94 100644
--- a/app/Http/Controllers/CommonCodeSyncController.php
+++ b/app/Http/Controllers/CommonCodeSyncController.php
@@ -97,7 +97,7 @@ public function export(Request $request): JsonResponse
     {
         // API Key 검증
         $apiKey = $request->header('X-Menu-Sync-Key');
-        $validKey = config('app.menu_sync_api_key', env('MENU_SYNC_API_KEY'));
+        $validKey = config('app.menu_sync_api_key');
 
         if (empty($validKey) || $apiKey !== $validKey) {
             return response()->json(['error' => 'Unauthorized'], 401);
@@ -124,7 +124,7 @@ public function import(Request $request): JsonResponse
     {
         // API Key 검증
         $apiKey = $request->header('X-Menu-Sync-Key');
-        $validKey = config('app.menu_sync_api_key', env('MENU_SYNC_API_KEY'));
+        $validKey = config('app.menu_sync_api_key');
 
         if (empty($validKey) || $apiKey !== $validKey) {
             return response()->json(['error' => 'Unauthorized'], 401);
diff --git a/app/Http/Controllers/MenuSyncController.php b/app/Http/Controllers/MenuSyncController.php
index 3745e366..f54e2cfb 100644
--- a/app/Http/Controllers/MenuSyncController.php
+++ b/app/Http/Controllers/MenuSyncController.php
@@ -122,7 +122,7 @@ public function export(Request $request): JsonResponse
     {
         // API Key 검증
         $apiKey = $request->header('X-Menu-Sync-Key');
-        $validKey = config('app.menu_sync_api_key', env('MENU_SYNC_API_KEY'));
+        $validKey = config('app.menu_sync_api_key');
 
         if (empty($validKey) || $apiKey !== $validKey) {
             return response()->json(['error' => 'Unauthorized'], 401);
@@ -150,7 +150,7 @@ public function import(Request $request): JsonResponse
     {
         // API Key 검증
         $apiKey = $request->header('X-Menu-Sync-Key');
-        $validKey = config('app.menu_sync_api_key', env('MENU_SYNC_API_KEY'));
+        $validKey = config('app.menu_sync_api_key');
 
         if (empty($validKey) || $apiKey !== $validKey) {
             return response()->json(['error' => 'Unauthorized'], 401);
diff --git a/config/app.php b/config/app.php
index a8a8f51b..055a8e83 100644
--- a/config/app.php
+++ b/config/app.php
@@ -123,4 +123,16 @@
         'store' => env('APP_MAINTENANCE_STORE', 'database'),
     ],
 
+    /*
+    |--------------------------------------------------------------------------
+    | Menu Sync API Key
+    |--------------------------------------------------------------------------
+    |
+    | 메뉴/공통코드/카테고리 동기화 API 인증 키
+    | 환경 간 동기화 시 X-Menu-Sync-Key 헤더로 검증
+    |
+    */
+
+    'menu_sync_api_key' => env('MENU_SYNC_API_KEY'),
+
 ];