diff --git a/src/controllers/api/accounts.ts b/src/controllers/api/accounts.ts
index 035a4837..d5beac03 100644
--- a/src/controllers/api/accounts.ts
+++ b/src/controllers/api/accounts.ts
@@ -98,6 +98,7 @@ const accountLookupController: AppController = async (c) => {
 
   const event = await lookupAccount(decodeURIComponent(acct));
   if (event) {
+    assertAuthenticated(c, event);
     return c.json(await renderAccount(event));
   }
   try {