diff --git a/core/endpoints/thing/views.py b/core/endpoints/thing/views.py
index 64dbeef..81a9493 100644
--- a/core/endpoints/thing/views.py
+++ b/core/endpoints/thing/views.py
@@ -318,7 +318,7 @@ def update_thing_privacy(request, data: ThingPrivacyPatchBody, thing_id: UUID =
 
 @router.get(
     '{thing_id}/metadata',
-    auth=[JWTAuth(), BasicAuth()],
+    auth=[JWTAuth(), BasicAuth(), anonymous_auth],
     response={
         200: ThingMetadataGetResponse,
         401: str,
@@ -338,7 +338,6 @@ def get_thing_metadata(request, thing_id: UUID = Path(...)):
     thing = get_thing_by_id(
         user=request.authenticated_user,
         thing_id=thing_id,
-        require_ownership=True,
         raise_http_errors=True
     )