diff --git a/engine/main.cc b/engine/main.cc
index 51ace2d9b..a51d825fc 100644
--- a/engine/main.cc
+++ b/engine/main.cc
@@ -250,10 +250,9 @@ void RunServer(std::optional<std::string> host, std::optional<int> port,
       .setClientMaxMemoryBodySize(1024 * 1024);  // 1MiB before writing to disk
 
   auto validate_api_key = [config_service](const drogon::HttpRequestPtr& req) {
-    auto const& api_keys =
-        config_service->GetApiServerConfiguration()->api_keys;
+    auto api_keys = config_service->GetApiServerConfiguration()->api_keys;
     static const std::unordered_set<std::string> public_endpoints = {
-        "/healthz", "/processManager/destroy"};
+        "/openapi.json", "/healthz", "/processManager/destroy"};
 
     // If API key is not set, skip validation
     if (api_keys.empty()) {