diff --git a/src/main/java/com/mindway/server/v2/global/security/config/SecurityConfig.java b/src/main/java/com/mindway/server/v2/global/security/config/SecurityConfig.java
index 8edc725..dffdf83 100644
--- a/src/main/java/com/mindway/server/v2/global/security/config/SecurityConfig.java
+++ b/src/main/java/com/mindway/server/v2/global/security/config/SecurityConfig.java
@@ -59,6 +59,9 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                                 .requestMatchers(HttpMethod.PATCH, "api/v2/order/{order_id}").authenticated()
                                 .requestMatchers(HttpMethod.GET, "api/v2/order").authenticated()
 
+                                // goal
+                                .requestMatchers(HttpMethod.POST, "/api/v2/goal").authenticated()
+
                                 .anyRequest().authenticated()
                 )