diff --git a/rpcserver.go b/rpcserver.go
index 4821828e2..f0eb7103b 100644
--- a/rpcserver.go
+++ b/rpcserver.go
@@ -155,6 +155,10 @@ var (
 			Entity: "address",
 			Action: "write",
 		},
+		{
+			Entity: "onchain",
+			Action: "read",
+		},
 	}
 
 	// permissions maps RPC calls to the permissions they require.