diff --git a/r2/r2/controllers/multi.py b/r2/r2/controllers/multi.py
index c8bd81702..a5a57a2b2 100644
--- a/r2/r2/controllers/multi.py
+++ b/r2/r2/controllers/multi.py
@@ -355,6 +355,7 @@ class MultiApiController(RedditController, OAuth2ResourceController):
     @require_oauth2_scope("read")
     @validate(
         VUser(),
+        VModhash(),
         multi=VMultiByPath("multipath", require_edit=True),
         data=VValidatedJSON('model', multi_description_json_spec),
     )