# Mark custom routes public without turning off auth

> AuthorizationConfig.excluded_route_paths lists the custom routes that skip auth, so one public route no longer means disabling authorization across AgentOS.

- Published: 2026-09-04
- Author: Joho Labs
- Categories: Changelog
- Canonical: https://www.agno.com/articles/mark-custom-routes-public-without-turning-off-auth
- Markdown: https://www.agno.com/articles/mark-custom-routes-public-without-turning-off-auth.md

We added `AuthorizationConfig.excluded_route_paths`. List the custom routes you want to leave open and they skip auth, while the rest of your AgentOS stays protected. Before this, making a single route public meant disabling authorization globally.

Learn more with [cookbook](https://github.com/agno-agi/agno/blob/main/cookbook/05_agent_os/07_security/excluded_routes.py).