diff --git a/src/main/java/life/mosu/mosuserver/global/filter/Whitelist.java b/src/main/java/life/mosu/mosuserver/global/filter/Whitelist.java
index 21da8a79..b9c00785 100644
--- a/src/main/java/life/mosu/mosuserver/global/filter/Whitelist.java
+++ b/src/main/java/life/mosu/mosuserver/global/filter/Whitelist.java
@@ -21,7 +21,6 @@ public enum Whitelist {
     SWAGGER_UI("/api/v1/swagger-ui", WhitelistMethod.ALL),
     VIRTUAL_ACCOUNT("/api/v1/virtual-account", WhitelistMethod.ALL),
     ADMISSION_TICKET("/api/v1/admission-ticket", WhitelistMethod.ALL),
-    APPLICATION_GUEST("/api/v1/applications/guest", WhitelistMethod.ALL),
 
     // 정적 리소스
     CSS("/api/v1/css", WhitelistMethod.GET),
@@ -33,11 +32,17 @@ public enum Whitelist {
     OAUTH2("/api/v1/oauth2", WhitelistMethod.ALL),
     OAUTH("/api/v1/oauth", WhitelistMethod.ALL),
 
+    // 삭제 예정
+    MASTER("/api/v1/master", WhitelistMethod.ALL),
+
     // 조회만 가능한 PATH
     EVENT("/api/v1/event", WhitelistMethod.GET),
     FAQ("/api/v1/faq", WhitelistMethod.GET),
-    NOTICE("/api/v1/notice", WhitelistMethod.GET);
+    NOTICE("/api/v1/notice", WhitelistMethod.GET),
+    USER_ID_CHECK("/api/v1/user/check-id", WhitelistMethod.GET),
+    CUSTOMER_KEY_CHECK("/api/v1/user/customer-key", WhitelistMethod.GET),
 
+    APPLICATION_GUEST("/api/v1/applications/guest", WhitelistMethod.ALL);
     private final String path;
     private final WhitelistMethod method;
 
diff --git a/src/main/java/life/mosu/mosuserver/presentation/user/UserController.java b/src/main/java/life/mosu/mosuserver/presentation/user/UserController.java
index 79feb948..ca87dbdd 100644
--- a/src/main/java/life/mosu/mosuserver/presentation/user/UserController.java
+++ b/src/main/java/life/mosu/mosuserver/presentation/user/UserController.java
@@ -34,6 +34,7 @@ public ResponseEntity<ApiResponseWrapper<UserInfoResponse>> getUserInfo(
     }
 
     @GetMapping("/customer-key")
+    @PreAuthorize("isAuthenticated() and hasRole('USER')")
     public ResponseEntity<ApiResponseWrapper<CustomerKeyResponse>> getCustomerKey(
             @UserId final Long userId
     ) {