diff --git a/api/app/controllers/superAgentProtocol.js b/api/app/controllers/superAgentProtocol.js
index 2d55534..a927022 100644
--- a/api/app/controllers/superAgentProtocol.js
+++ b/api/app/controllers/superAgentProtocol.js
@@ -55,6 +55,10 @@ const buildTrustedHeaders = (ctx, hasJsonBody = false) => {
       Accept: 'application/json, text/event-stream',
       Authorization: `Bearer ${issued.token}`,
    };
+   const searchToken = String(ctx.fs?.curUser?.token || '').trim();
+   if (searchToken) {
+      headers['X-PEP-Token'] = searchToken;
+   }
    if (hasJsonBody) headers['Content-Type'] = 'application/json';
    return headers;
 };