diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go
index b68717f7c875..2ff3768c9be3 100644
--- a/routers/api/v1/api.go
+++ b/routers/api/v1/api.go
@@ -692,8 +692,8 @@ func RegisterRoutes(m *macaron.Macaron) {
 						})
 						m.Group("/subscriptions", func() {
 							m.Get("", bind(api.User{}), repo.GetIssueSubscribers)
-							m.Put("/:user", repo.AddIssueSubscription)
-							m.Delete("/:user", repo.DelIssueSubscription)
+							m.Put("/:user", reqToken(), repo.AddIssueSubscription)
+							m.Delete("/:user", reqToken(), repo.DelIssueSubscription)
 						})
 					})
 				}, mustEnableIssuesOrPulls)