diff --git a/api/endpoints/metrics.php b/api/endpoints/metrics.php
index 8763f11..fbbb97b 100644
--- a/api/endpoints/metrics.php
+++ b/api/endpoints/metrics.php
@@ -1,9 +1,7 @@
 <?php
 // Agent metrics history — returns CPU/RAM samples for sparklines
 require_once __DIR__ . '/../config.php';
-require_once __DIR__ . '/../../includes/auth.php';
 header('Content-Type: application/json');
-AuthMiddleware::requireAuth();
 
 $agentId = $_GET['agent_id'] ?? '';
 $hours   = min((int)($_GET['hours'] ?? 2), 24);
diff --git a/api/endpoints/suggestions.php b/api/endpoints/suggestions.php
index d62de35..bec7ed7 100644
--- a/api/endpoints/suggestions.php
+++ b/api/endpoints/suggestions.php
@@ -1,9 +1,7 @@
 <?php
 // Proactive suggestions endpoint — returns time-based command suggestions
 require_once __DIR__ . '/../config.php';
-require_once __DIR__ . '/../../includes/auth.php';
 header('Content-Type: application/json');
-AuthMiddleware::requireAuth();
 
 $hour = (int)date('G');
 $dow  = (int)date('w'); // 0=Sun, 6=Sat