diff --git a/api/admin.go b/api/admin.go
index 639a47f..5ce6f51 100644
--- a/api/admin.go
+++ b/api/admin.go
@@ -17,7 +17,7 @@ func (s *Server) authenticateAdmin(w http.ResponseWriter, r *http.Request) bool
 		return false
 	}
 
-	return true
+	return apiKey == s.cfg.AdminAPIKey
 }
 
 type channelConfigsDeleteRequest struct {