diff --git a/src/murfey/server/api/auth.py b/src/murfey/server/api/auth.py
index d790f457d..add0f8342 100644
--- a/src/murfey/server/api/auth.py
+++ b/src/murfey/server/api/auth.py
@@ -42,11 +42,11 @@
 ALGORITHM = security_config.auth_algorithm or "HS256"
 SECRET_KEY = security_config.auth_key or secrets.token_hex(32)
 if security_config.auth_type == "password":
-    oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token")
+    oauth2_scheme = OAuth2PasswordBearer(tokenUrl="auth/token")
 else:
     oauth2_scheme = APIKeyCookie(name=security_config.cookie_key)
 if security_config.instrument_auth_type == "token":
-    instrument_oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token")
+    instrument_oauth2_scheme = OAuth2PasswordBearer(tokenUrl="auth/token")
 else:
     instrument_oauth2_scheme = lambda *args, **kwargs: None
 pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")