diff --git a/proto/tokens/v1/tokens_v1.proto b/proto/tokens/v1/tokens_v1.proto
index 50d2f97..d1dfe0d 100644
--- a/proto/tokens/v1/tokens_v1.proto
+++ b/proto/tokens/v1/tokens_v1.proto
@@ -22,7 +22,12 @@ service TokensService {
   rpc ListTokens (google.protobuf.Empty) returns (stream ListTokensResponse) {}
   // List all available permissions
   rpc ListPermissions (google.protobuf.Empty) returns (stream ListPermissionsResponse) {}
+}
+
+// An endpoint to authenticate with a token should be here
+service PublicTokensService {
   // Recieve a JWT access token
+  // DO NOT implement it in the web app!
   rpc AuthenticateWithToken(AuthenticateWithTokenRequest) returns (google.protobuf.Empty) {}
 }