diff --git a/inventory-app/doorboy.py b/inventory-app/doorboy.py
index afc7264..6ba82cd 100644
--- a/inventory-app/doorboy.py
+++ b/inventory-app/doorboy.py
@@ -10,6 +10,7 @@ from wtforms.validators import DataRequired
 
 import pytz
 import const
+from api import check_api_key
 from common import spam, User
 from oidc import login_required, read_user
 
@@ -300,6 +301,7 @@ class FormSwipe(FlaskForm):
     timestamp = DateTimeField('timestamp')
 
 @page_doorboy.route("/m/doorboy/swipe", methods=["POST"])
+@check_api_key
 def view_swipe():
     form = request.json
     print(form)