diff --git a/.changeset/serious-tables-chew.md b/.changeset/serious-tables-chew.md
new file mode 100644
index 0000000000..cc5a218f3d
--- /dev/null
+++ b/.changeset/serious-tables-chew.md
@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-catalog-backend': patch
+'@backstage/plugin-catalog-common': patch
+---
+
+- The `analyze-location` endpoint is now protected by the `catalog.location.create` permission.
+- The `validate-entity` endpoint is now protected by the `catalog.entity.create` permission.