diff --git a/hc/api/views.py b/hc/api/views.py
index 2eb6a51c..36ce3a16 100644
--- a/hc/api/views.py
+++ b/hc/api/views.py
@@ -177,6 +177,7 @@ def badge(request, username, signature, tag):
     return HttpResponse(svg, content_type="image/svg+xml")
 
 
+@csrf_exempt
 @uuid_or_400
 def bounce(request, code):
     try: