diff --git a/includes/Api/ModuleSettingsController.php b/includes/Api/ModuleSettingsController.php
index b375578..84236a4 100644
--- a/includes/Api/ModuleSettingsController.php
+++ b/includes/Api/ModuleSettingsController.php
@@ -32,12 +32,12 @@ class ModuleSettingsController extends WP_REST_Controller {
      * Register routes
      */
     public function register_routes() {
-        // GET /woonoow/v1/modules/{module_id}/settings
+        // GET /woonoow/v1/modules/{module_id}/settings (public - needed by frontend)
         register_rest_route($this->namespace, '/' . $this->rest_base . '/(?P<module_id>[a-zA-Z0-9_-]+)/settings', [
             [
                 'methods' => WP_REST_Server::READABLE,
                 'callback' => [$this, 'get_settings'],
-                'permission_callback' => [$this, 'check_permission'],
+                'permission_callback' => '__return_true', // Public: settings are non-sensitive, needed by customer pages
                 'args' => [
                     'module_id' => [
                         'required' => true,