diff --git a/openapi/components/paths/miscellaneous.yaml b/openapi/components/paths/miscellaneous.yaml
index de165449..82cd5201 100644
--- a/openapi/components/paths/miscellaneous.yaml
+++ b/openapi/components/paths/miscellaneous.yaml
@@ -82,6 +82,8 @@ paths:
       parameters:
         - $ref: ../parameters.yaml#/require
         - $ref: ../parameters.yaml#/include
+      security:
+        - authCookie: []
       responses:
         "200":
           $ref: ../responses/system/InfoPushListResponse.yaml
diff --git a/openapi/components/paths/worlds.yaml b/openapi/components/paths/worlds.yaml
index 4bc13150..c31117a6 100644
--- a/openapi/components/paths/worlds.yaml
+++ b/openapi/components/paths/worlds.yaml
@@ -161,6 +161,7 @@ paths:
         Works unauthenticated but when so will always return `0` for certain fields.
       tags:
         - worlds
+      security: []
       responses:
         "200":
           $ref: ../responses/worlds/WorldResponse.yaml
@@ -211,8 +212,7 @@ paths:
       description: Return a worlds custom metadata. This is currently believed to be unused. Metadata can be set with `updateWorld` and can be any arbitrary object.
       tags:
         - worlds
-      security:
-        - authCookie: []
+      security: []
       responses:
         "200":
           $ref: ../responses/worlds/WorldMetadataResponse.yaml