diff --git a/README.md b/README.md
index da67439..ea3c53d 100644
--- a/README.md
+++ b/README.md
@@ -147,6 +147,7 @@ Common optional flags:
 Run endpoint:
 
 - `POST /v1/runs`
+- No built-in authentication is provided in the current implementation; deploy behind a trusted boundary or gateway.
 
 Request example: