diff --git a/plugins/permission-common/src/PermissionClient.ts b/plugins/permission-common/src/PermissionClient.ts
index 45224afc91..9431050690 100644
--- a/plugins/permission-common/src/PermissionClient.ts
+++ b/plugins/permission-common/src/PermissionClient.ts
@@ -43,9 +43,18 @@ const permissionCriteriaSchema: z.ZodSchema<
       rule: z.string(),
       params: z.array(z.unknown()),
     })
-    .or(z.object({ anyOf: z.array(permissionCriteriaSchema).nonempty() }))
-    .or(z.object({ allOf: z.array(permissionCriteriaSchema).nonempty() }))
-    .or(z.object({ not: permissionCriteriaSchema })),
+    .strict()
+    .or(
+      z
+        .object({ anyOf: z.array(permissionCriteriaSchema).nonempty() })
+        .strict(),
+    )
+    .or(
+      z
+        .object({ allOf: z.array(permissionCriteriaSchema).nonempty() })
+        .strict(),
+    )
+    .or(z.object({ not: permissionCriteriaSchema }).strict()),
 );
 
 const responseSchema = z.object({
diff --git a/plugins/permission-node/src/integration/createPermissionIntegrationRouter.ts b/plugins/permission-node/src/integration/createPermissionIntegrationRouter.ts
index 20c5cee20a..efb5d7c3a6 100644
--- a/plugins/permission-node/src/integration/createPermissionIntegrationRouter.ts
+++ b/plugins/permission-node/src/integration/createPermissionIntegrationRouter.ts
@@ -38,13 +38,15 @@ const permissionCriteriaSchema: z.ZodSchema<
   PermissionCriteria<PermissionCondition>
 > = z.lazy(() =>
   z.union([
-    z.object({ anyOf: z.array(permissionCriteriaSchema).nonempty() }),
-    z.object({ allOf: z.array(permissionCriteriaSchema).nonempty() }),
-    z.object({ not: permissionCriteriaSchema }),
-    z.object({
-      rule: z.string(),
-      params: z.array(z.unknown()),
-    }),
+    z.object({ anyOf: z.array(permissionCriteriaSchema).nonempty() }).strict(),
+    z.object({ allOf: z.array(permissionCriteriaSchema).nonempty() }).strict(),
+    z.object({ not: permissionCriteriaSchema }).strict(),
+    z
+      .object({
+        rule: z.string(),
+        params: z.array(z.unknown()),
+      })
+      .strict(),
   ]),
 );