diff --git a/r2/r2/controllers/api.py b/r2/r2/controllers/api.py
index 33d8dd321..09a5a462a 100755
--- a/r2/r2/controllers/api.py
+++ b/r2/r2/controllers/api.py
@@ -256,6 +256,7 @@ class ApiController(RedditController, OAuth2ResourceController):
 
             queries.new_message(m, inbox_rel)
 
+    @require_oauth2_scope("submit")
     @json_validate()
     @api_doc(api_section.subreddits, uses_site=True, extensions=["json"])
     def GET_submit_text(self, responder):