diff --git a/studio/backend/routes/datasets.py b/studio/backend/routes/datasets.py
index cb1ea75e33..a53e223015 100644
--- a/studio/backend/routes/datasets.py
+++ b/studio/backend/routes/datasets.py
@@ -5,7 +5,7 @@ import base64
 import io
 import sys
 from pathlib import Path
-from fastapi import APIRouter, HTTPException
+from fastapi import APIRouter, Depends, HTTPException
 import logging
 
 # Add backend directory to path
@@ -15,6 +15,7 @@ if str(backend_path) not in sys.path:
 
 # Import dataset utilities
 from utils.datasets import check_dataset_format
+from auth.authentication import get_current_subject
 
 router = APIRouter()
 logger = logging.getLogger(__name__)
@@ -84,7 +85,10 @@ DATA_EXTS = (
 
 
 @router.post("/check-format", response_model=CheckFormatResponse)
-def check_format(request: CheckFormatRequest):
+def check_format(
+    request: CheckFormatRequest,
+    current_subject: str = Depends(get_current_subject),
+):
     """
     Check if a dataset requires manual column mapping.
 
diff --git a/studio/frontend/src/features/training/api/datasets-api.ts b/studio/frontend/src/features/training/api/datasets-api.ts
index 7bba75ca38..b2348abed8 100644
--- a/studio/frontend/src/features/training/api/datasets-api.ts
+++ b/studio/frontend/src/features/training/api/datasets-api.ts
@@ -1,3 +1,4 @@
+import { authFetch } from "@/features/auth";
 import type { CheckFormatResponse } from "../types/datasets";
 
 type CheckDatasetFormatArgs = {
@@ -15,7 +16,7 @@ export async function checkDatasetFormat({
   split,
   isVlm,
 }: CheckDatasetFormatArgs): Promise<CheckFormatResponse> {
-  const res = await fetch("/api/datasets/check-format", {
+  const res = await authFetch("/api/datasets/check-format", {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({