diff --git a/services/token-aggregation/src/api/middleware/omnl-guards.ts b/services/token-aggregation/src/api/middleware/omnl-guards.ts
index 43719ce..6474abb 100644
--- a/services/token-aggregation/src/api/middleware/omnl-guards.ts
+++ b/services/token-aggregation/src/api/middleware/omnl-guards.ts
@@ -50,6 +50,7 @@ const OMNL_PUBLIC_PATH_SUFFIXES = ['/omnl/openapi.json', '/omnl/catalog', '/omnl
 
 function isPublicOmnlPath(path: string): boolean {
   if (OMNL_PUBLIC_PATH_SUFFIXES.some((s) => path.endsWith(s))) return true;
+  if (path.startsWith('/omnl/gazette/')) return true;
   // Compliance console is read-only; allow without API key when explicitly enabled (LAN operator UI).
   if (process.env.OMNL_COMPLIANCE_CONSOLE_PUBLIC === '1' && isComplianceConsolePath(path)) return true;
   return false;