diff --git a/knotserver/handler.go b/knotserver/handler.go
index 6e7ea35c..d64fe27d 100644
--- a/knotserver/handler.go
+++ b/knotserver/handler.go
@@ -69,13 +69,17 @@ func Setup(ctx context.Context, c *config.Config, db *db.DB, e *rbac.Enforcer, j
 	r.Route("/{did}", func(r chi.Router) {
 		// Repo routes
 		r.Route("/{name}", func(r chi.Router) {
-			r.Post("/collaborator/add", h.AddRepoCollaborator)
+			r.Route("/collaborator", func(r chi.Router) {
+				r.Use(h.VerifySignature)
+				r.Post("/add", h.AddRepoCollaborator)
+			})
 
 			r.Get("/", h.RepoIndex)
 			r.Get("/info/refs", h.InfoRefs)
 			r.Post("/git-upload-pack", h.UploadPack)
 
 			r.Route("/merge", func(r chi.Router) {
+				r.With(h.VerifySignature)
 				r.Post("/", h.Merge)
 				r.Post("/check", h.MergeCheck)
 			})