diff --git a/src/presentation/routing/auth.py b/src/presentation/routing/auth.py
index 612e570..ed03671 100644
--- a/src/presentation/routing/auth.py
+++ b/src/presentation/routing/auth.py
@@ -33,6 +33,7 @@ auth_router = APIRouter(prefix='/auth', tags=['auth'])
 )
 @rate_limit(limit=5, window_seconds=60, scope='ip')
 @rate_limit(limit=3, window_seconds=600, scope='key', key_prefix='rl:reg_start', key_builder=email_rl_key)
+@csrf_protect()
 async def registration_start(
     request: Request,
     body: RegistrationStart,