diff --git a/apps/sim/app/api/tools/file/manage/route.ts b/apps/sim/app/api/tools/file/manage/route.ts
index e52df34cfc..6008241147 100644
--- a/apps/sim/app/api/tools/file/manage/route.ts
+++ b/apps/sim/app/api/tools/file/manage/route.ts
@@ -14,6 +14,7 @@ import {
   uploadWorkspaceFile,
 } from '@/lib/uploads/contexts/workspace/workspace-file-manager'
 import { getFileExtension, getMimeTypeFromExtension } from '@/lib/uploads/utils/file-utils'
+import { assertActiveWorkspaceAccess } from '@/lib/workspaces/permissions/utils'
 
 export const dynamic = 'force-dynamic'
 
@@ -40,6 +41,8 @@ export const POST = withRouteHandler(async (request: NextRequest) => {
   }
 
   try {
+    await assertActiveWorkspaceAccess(workspaceId, userId)
+
     switch (body.operation) {
       case 'get': {
         const { fileId, fileInput } = body