diff --git a/src/routes/api/client/list/+server.ts b/src/routes/api/client/list/+server.ts
index 47fa5ab..5354ece 100644
--- a/src/routes/api/client/list/+server.ts
+++ b/src/routes/api/client/list/+server.ts
@@ -1,11 +1,15 @@
-import { json } from "@sveltejs/kit";
+import { error, json } from "@sveltejs/kit";
 import { authenticate } from "$lib/server/modules/auth";
 import { clientListResponse, type ClientListResponse } from "$lib/server/schemas";
 import { getUserClientList } from "$lib/server/services/client";
-import type { RequestHandler } from "@sveltejs/kit";
+import type { RequestHandler } from "./$types";
 
 export const GET: RequestHandler = async ({ cookies }) => {
-  const { userId } = authenticate(cookies);
+  const { userId, clientId } = authenticate(cookies);
+  if (!clientId) {
+    error(403, "Forbidden");
+  }
+
   const { userClients } = await getUserClientList(userId);
   return json(clientListResponse.parse({ clients: userClients } satisfies ClientListResponse));
 };
diff --git a/src/routes/api/client/status/+server.ts b/src/routes/api/client/status/+server.ts
index 3b413b7..a1e9cd8 100644
--- a/src/routes/api/client/status/+server.ts
+++ b/src/routes/api/client/status/+server.ts
@@ -2,7 +2,7 @@ import { error, json } from "@sveltejs/kit";
 import { authenticate } from "$lib/server/modules/auth";
 import { clientStatusResponse, type ClientStatusResponse } from "$lib/server/schemas";
 import { getUserClientStatus } from "$lib/server/services/client";
-import type { RequestHandler } from "@sveltejs/kit";
+import type { RequestHandler } from "./$types";
 
 export const GET: RequestHandler = async ({ cookies }) => {
   const { userId, clientId } = authenticate(cookies);