diff --git a/lib/Controller/APIController.php b/lib/Controller/APIController.php
index eeece852..eb578476 100644
--- a/lib/Controller/APIController.php
+++ b/lib/Controller/APIController.php
@@ -69,6 +69,9 @@ public function disapprove(int $attemptId): DataResponse {
 		return new DataResponse([], Http::STATUS_OK);
 	}
 
+	/**
+	 * @NoTwoFactorRequired
+	 */
 	#[PublicPage]
 	public function poll(string $token): DataResponse {
 		try {