diff --git a/management/internals/shared/grpc/proxy_auth.go b/management/internals/shared/grpc/proxy_auth.go
index 08a28c602..dd593dfa0 100644
--- a/management/internals/shared/grpc/proxy_auth.go
+++ b/management/internals/shared/grpc/proxy_auth.go
@@ -71,14 +71,13 @@ func NewProxyAuthInterceptors(tokenStore proxyTokenStore) (grpc.UnaryServerInter
 			return handler(ctx, req)
 		}
 
-		// token, err := interceptor.validateProxyToken(ctx)
-		// if err != nil {
-		// 	// Log auth failures explicitly; gRPC doesn't log these by default.
-		// 	log.WithContext(ctx).Warnf("proxy auth failed: %v", err)
-		// 	return nil, err
-		// }
+		token, err := interceptor.validateProxyToken(ctx)
+		if err != nil {
+			// Log auth failures explicitly; gRPC doesn't log these by default.
+			log.WithContext(ctx).Warnf("proxy auth failed: %v", err)
+			return nil, err
+		}
 
-		token := &types.ProxyAccessToken{}
 		ctx = context.WithValue(ctx, ProxyTokenContextKey, token)
 		return handler(ctx, req)
 	}
@@ -88,14 +87,13 @@ func NewProxyAuthInterceptors(tokenStore proxyTokenStore) (grpc.UnaryServerInter
 			return handler(srv, ss)
 		}
 
-		// token, err := interceptor.validateProxyToken(ss.Context())
-		// if err != nil {
-		// 	// Log auth failures explicitly; gRPC doesn't log these by default.
-		// 	log.WithContext(ss.Context()).Warnf("proxy auth failed: %v", err)
-		// 	return err
-		// }
+		token, err := interceptor.validateProxyToken(ss.Context())
+		if err != nil {
+			// Log auth failures explicitly; gRPC doesn't log these by default.
+			log.WithContext(ss.Context()).Warnf("proxy auth failed: %v", err)
+			return err
+		}
 
-		token := &types.ProxyAccessToken{}
 		ctx := context.WithValue(ss.Context(), ProxyTokenContextKey, token)
 		wrapped := &wrappedServerStream{
 			ServerStream: ss,