diff --git a/scripts/install b/scripts/install
index a4a8baa..421635b 100755
--- a/scripts/install
+++ b/scripts/install
@@ -266,6 +266,8 @@ then
 	ynh_permission_update --permission="main" --add="visitors"
 fi
 
+ynh_permission_create --permission="api" --url="/api" --allowed="visitors" --auth_header="false" --show_tile="false" --protected="true"
+
 #=================================================
 # RELOAD NGINX
 #=================================================
diff --git a/scripts/upgrade b/scripts/upgrade
index 1aec2e1..c874369 100755
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -51,6 +51,12 @@ if ynh_legacy_permissions_exists; then
 
 	ynh_app_setting_delete --app=$app --key=is_public
 fi
+
+# Create a permission if needed
+if ! ynh_permission_exists --permission="api"; then
+	ynh_permission_create --permission="api" --url="/api" --allowed="visitors" --auth_header="false" --show_tile="false" --protected="true"
+fi
+
 #Switch variables name
 psql_db=$(ynh_app_setting_get --app=$app --key=psql_db)