diff --git a/src/Oms.Application/Services/Customers/CustomerService.cs b/src/Oms.Application/Services/Customers/CustomerService.cs
index 19ab5ac..009bedc 100644
--- a/src/Oms.Application/Services/Customers/CustomerService.cs
+++ b/src/Oms.Application/Services/Customers/CustomerService.cs
@@ -6,6 +6,7 @@ using Fake.Rbac.Application.Services;
 using Fake.Rbac.Infrastructure;
 using Fake.Security.Claims;
 using Fake.EntityFrameworkCore;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 using Oms.Application.Dtos.Customers;
@@ -228,10 +229,11 @@ public class CustomerService : ApplicationService
     }
 
     /// <summary>
-    /// 新增客户。
+    /// 新增客户（公开注册页可匿名调用；管理端也可带 token 代开户）。
     /// </summary>
     /// <param name="input">入参：客户创建参数。</param>
     /// <returns>无返回体，仅完成新增客户。</returns>
+    [AllowAnonymous]
     [HttpPost("/customer/create")]
     public async Task CreateAsync(CreateCustomerInput input)
     {