diff --git a/apps/assets/api/account/account.py b/apps/assets/api/account/account.py
index 8e8e320bd..4aef92de0 100644
--- a/apps/assets/api/account/account.py
+++ b/apps/assets/api/account/account.py
@@ -43,7 +43,7 @@ class AccountSecretsViewSet(RecordViewLogMixin, AccountViewSet):
     serializer_classes = {
         'default': serializers.AccountSecretSerializer
     }
-    http_method_names = ['get']
+    http_method_names = ['get', 'options']
     # Todo: 记得打开
     # permission_classes = [RBACPermission, UserConfirmation.require(ConfirmType.MFA)]
     rbac_perms = {