diff --git a/src/presentation/routing/order.py b/src/presentation/routing/order.py
index e93016a..8e4e193 100644
--- a/src/presentation/routing/order.py
+++ b/src/presentation/routing/order.py
@@ -237,6 +237,7 @@ async def payment_quote(
         status_code=200,
         responses=ERROR_RESPONSES,
 )
+@csrf_protect()
 async def list_orders(
         limit: int = Query(default=20, ge=1, le=100),
         offset: int = Query(default=0, ge=0),
@@ -254,6 +255,7 @@ async def list_orders(
         status_code=200,
         responses=ERROR_RESPONSES,
 )
+@csrf_protect()
 async def list_payments(
         limit: int = Query(default=20, ge=1, le=100),
         offset: int = Query(default=0, ge=0),
@@ -275,6 +277,7 @@ async def list_payments(
         status_code=200,
         responses=ERROR_RESPONSES,
 )
+@csrf_protect()
 async def order_status(
         order_id: str,
         auth: AuthContext = Depends(require_access_token),
@@ -327,6 +330,7 @@ async def order_events(
         status_code=200,
         responses=ERROR_RESPONSES,
 )
+@csrf_protect()
 async def order_detail(
         order_id: str,
         auth: AuthContext = Depends(require_access_token),