diff --git a/plugins/metrics.js b/plugins/metrics.js
index 3d3604327..36f7f4f91 100644
--- a/plugins/metrics.js
+++ b/plugins/metrics.js
@@ -18,9 +18,12 @@ module.exports = {
             path: '/metrics',
             handler: async (_, h) => h.response(await getSummary()),
             config: {
+                auth: {
+                    mode: 'required'
+                },
                 plugins: {
                     'hapi-rate-limit': {
-                        enabled: false
+                        enabled: true
                     }
                 },
                 description: 'application metrics',