diff --git a/internal/admin/router_ee.go b/internal/admin/router_ee.go
index cec3595f9d..7da7629943 100644
--- a/internal/admin/router_ee.go
+++ b/internal/admin/router_ee.go
@@ -75,6 +75,11 @@ func RegisterEERouter(protected *gin.RouterGroup, r *Router) {
 	protected.POST("/license/config", r.handler.UpdateLicenseConfig)
 	protected.GET("/license", r.handler.ShowLicense)
 
+	// Token statistics
+	protected.GET("/stats/token", r.handler.GetTokenStats)
+	protected.GET("/stats/token/users", r.handler.GetTokenUsersStats)
+	protected.GET("/stats/token/summary", r.handler.GetTokenStatsSummary)
+
 	// Stats data info
 	protected.GET("/users/:username/activity", r.handler.ShowUserActivity)
 	protected.GET("/users/:username/dataset", r.handler.ShowUserDatasetSummary)
diff --git a/internal/cli/admin_command.go b/internal/cli/admin_command.go
index ab8910fce1..3506515e84 100644
--- a/internal/cli/admin_command.go
+++ b/internal/cli/admin_command.go
@@ -1793,9 +1793,9 @@ func (c *CLI) AdminStatsUsersCommand(cmd *Command) (ResponseIf, error) {
 		q.Set("to", toTime)
 	}
 
-	url := fmt.Sprintf("/admin/stats/token/users?%s", q.Encode())
+	baseURL := fmt.Sprintf("/admin/stats/token/users?%s", q.Encode())
 
-	resp, err := c.AdminServerClient.Request("GET", url, "web", nil, nil)
+	resp, err := c.AdminServerClient.Request("GET", baseURL, "admin", nil, nil)
 	if err != nil {
 		return nil, fmt.Errorf("failed to get stats: %w", err)
 	}