diff --git a/keyserver/addons/rust-node-addon/src/identity_client.rs b/keyserver/addons/rust-node-addon/src/identity_client.rs
--- a/keyserver/addons/rust-node-addon/src/identity_client.rs
+++ b/keyserver/addons/rust-node-addon/src/identity_client.rs
@@ -12,7 +12,7 @@
   PakeRegistrationUploadAndCredentialRequest as PakeRegistrationUploadAndCredentialRequestStruct,
   RegistrationRequest, RegistrationResponse as RegistrationResponseMessage,
 };
-use crate::IDENTITY_SERVICE_SOCKET_ADDR;
+use crate::{AUTH_TOKEN, IDENTITY_SERVICE_SOCKET_ADDR};
 use comm_opaque::Cipher;
 use napi::bindgen_prelude::*;
 use opaque_ke::{
@@ -24,7 +24,7 @@
 use rand::{rngs::OsRng, CryptoRng, Rng};
 use tokio::sync::mpsc;
 use tokio_stream::wrappers::ReceiverStream;
-use tonic::Request;
+use tonic::{metadata::MetadataValue, transport::Channel, Request};
 use tracing::{error, instrument};
 
 #[napi]
@@ -36,10 +36,18 @@
   password: String,
   user_public_key: String,
 ) -> Result<String> {
+  let channel = Channel::from_static(&IDENTITY_SERVICE_SOCKET_ADDR)
+    .connect()
+    .await
+    .map_err(|_| Error::from_status(Status::GenericFailure))?;
+  let token: MetadataValue<_> = AUTH_TOKEN
+    .parse()
+    .map_err(|_| Error::from_status(Status::GenericFailure))?;
   let mut identity_client =
-    IdentityServiceClient::connect(IDENTITY_SERVICE_SOCKET_ADDR.as_str())
-      .await
-      .map_err(|_| Error::from_status(Status::GenericFailure))?;
+    IdentityServiceClient::with_interceptor(channel, |mut req: Request<()>| {
+      req.metadata_mut().insert("authorization", token.clone());
+      Ok(req)
+    });
 
   // Create a RegistrationRequest channel and use ReceiverStream to turn the
   // MPSC receiver into a Stream for outbound messages
diff --git a/keyserver/addons/rust-node-addon/src/lib.rs b/keyserver/addons/rust-node-addon/src/lib.rs
--- a/keyserver/addons/rust-node-addon/src/lib.rs
+++ b/keyserver/addons/rust-node-addon/src/lib.rs
@@ -14,5 +14,7 @@
 lazy_static! {
   pub static ref IDENTITY_SERVICE_SOCKET_ADDR: String =
     var("COMM_IDENTITY_SERVICE_SOCKET_ADDR")
-      .unwrap_or("https://[::1]:50051".to_string());
+      .unwrap_or_else(|_| "https://[::1]:50051".to_string());
+  pub static ref AUTH_TOKEN: String = var("COMM_IDENTITY_SERVICE_AUTH_TOKEN")
+    .unwrap_or_else(|_| "test".to_string());
 }