diff --git a/packages/backend/src/server/api/mastodon/endpoints/account.ts b/packages/backend/src/server/api/mastodon/endpoints/account.ts
index 61d4da8a8a..1b55a5fbd3 100644
--- a/packages/backend/src/server/api/mastodon/endpoints/account.ts
+++ b/packages/backend/src/server/api/mastodon/endpoints/account.ts
@@ -33,7 +33,7 @@ export function apiAccountMastodon(router: Router): void {
             ctx.body = e.response.data;
         }
     });
-    router.patch('/v1/accounts/update_credentials', async (ctx) => {
+    router.patch('/v1/accounts/update_credentials', koaBody(), async (ctx) => {
         const BASE_URL = `${ctx.protocol}://${ctx.hostname}`;
         const accessTokens = ctx.headers.authorization;
         const client = getClient(BASE_URL, accessTokens);
@@ -177,7 +177,7 @@ export function apiAccountMastodon(router: Router): void {
             ctx.body = e.response.data;
         }
     });
-    router.post<{ Params: { id: string } }>('/v1/accounts/:id/mute',  async (ctx) => {
+    router.post<{ Params: { id: string } }>('/v1/accounts/:id/mute', koaBody(), async (ctx) => {
         const BASE_URL = `${ctx.protocol}://${ctx.hostname}`;
         const accessTokens = ctx.headers.authorization;
         const client = getClient(BASE_URL, accessTokens);
diff --git a/packages/backend/src/server/api/mastodon/endpoints/auth.ts b/packages/backend/src/server/api/mastodon/endpoints/auth.ts
index ff8b8a5188..5f5756077f 100644
--- a/packages/backend/src/server/api/mastodon/endpoints/auth.ts
+++ b/packages/backend/src/server/api/mastodon/endpoints/auth.ts
@@ -42,7 +42,7 @@ const writeScope = [
 
 export function apiAuthMastodon(router: Router): void {
 
-	router.post('/v1/apps',  async (ctx) => {
+	router.post('/v1/apps', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
diff --git a/packages/backend/src/server/api/mastodon/endpoints/filter.ts b/packages/backend/src/server/api/mastodon/endpoints/filter.ts
index 810b8be110..3c66362dd5 100644
--- a/packages/backend/src/server/api/mastodon/endpoints/filter.ts
+++ b/packages/backend/src/server/api/mastodon/endpoints/filter.ts
@@ -5,7 +5,7 @@ import { getClient } from '../ApiMastodonCompatibleService.js';
 
 export function apiFilterMastodon(router: Router): void {
 
-	router.get('/v1/filters',  async (ctx) => {
+	router.get('/v1/filters', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
@@ -20,7 +20,7 @@ export function apiFilterMastodon(router: Router): void {
 		}
 	});
 
-	router.get('/v1/filters/:id',  async (ctx) => {
+	router.get('/v1/filters/:id', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
@@ -35,7 +35,7 @@ export function apiFilterMastodon(router: Router): void {
 		}
 	});
 
-	router.post('/v1/filters',  async (ctx) => {
+	router.post('/v1/filters', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
@@ -50,7 +50,7 @@ export function apiFilterMastodon(router: Router): void {
 		}
 	});
 
-	router.post('/v1/filters/:id',  async (ctx) => {
+	router.post('/v1/filters/:id', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
@@ -65,7 +65,7 @@ export function apiFilterMastodon(router: Router): void {
 		}
 	});
 
-	router.delete('/v1/filters/:id',  async (ctx) => {
+	router.delete('/v1/filters/:id', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
diff --git a/packages/backend/src/server/api/mastodon/endpoints/notifications.ts b/packages/backend/src/server/api/mastodon/endpoints/notifications.ts
index 625ff386c1..59869da068 100644
--- a/packages/backend/src/server/api/mastodon/endpoints/notifications.ts
+++ b/packages/backend/src/server/api/mastodon/endpoints/notifications.ts
@@ -10,7 +10,7 @@ function toLimitToInt(q: any) {
 
 export function apiNotificationsMastodon(router: Router): void {
 
-	router.get('/v1/notifications',  async (ctx) => {
+	router.get('/v1/notifications', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
@@ -35,7 +35,7 @@ export function apiNotificationsMastodon(router: Router): void {
 		}
 	});
 
-	router.get('/v1/notification/:id',  async (ctx) => {
+	router.get('/v1/notification/:id', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
@@ -56,7 +56,7 @@ export function apiNotificationsMastodon(router: Router): void {
 		}
 	});
 
-	router.post('/v1/notifications/clear',  async (ctx) => {
+	router.post('/v1/notifications/clear', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
@@ -71,7 +71,7 @@ export function apiNotificationsMastodon(router: Router): void {
 		}
 	});
 
-	router.post('/v1/notification/:id/dismiss',  async (ctx) => {
+	router.post('/v1/notification/:id/dismiss', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
diff --git a/packages/backend/src/server/api/mastodon/endpoints/search.ts b/packages/backend/src/server/api/mastodon/endpoints/search.ts
index dce3ff57c8..f87e199f5f 100644
--- a/packages/backend/src/server/api/mastodon/endpoints/search.ts
+++ b/packages/backend/src/server/api/mastodon/endpoints/search.ts
@@ -5,7 +5,7 @@ import { getClient } from '../ApiMastodonCompatibleService.js';
 
 export function apiSearchMastodon(router: Router): void {
 
-	router.get('/v1/search',  async (ctx) => {
+	router.get('/v1/search', koaBody(), async (ctx) => {
 		const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 		const accessTokens = ctx.request.headers.authorization;
 		const client = getClient(BASE_URL, accessTokens);
diff --git a/packages/backend/src/server/api/mastodon/endpoints/status.ts b/packages/backend/src/server/api/mastodon/endpoints/status.ts
index 8dc4ba5f7d..593be10f93 100644
--- a/packages/backend/src/server/api/mastodon/endpoints/status.ts
+++ b/packages/backend/src/server/api/mastodon/endpoints/status.ts
@@ -11,7 +11,7 @@ import axios from 'axios';
 const pump = promisify(pipeline);
 
 export function apiStatusMastodon(router: Router): void {
-    router.post('/v1/statuses',  async (ctx, reply) => {
+    router.post('/v1/statuses', koaBody(), async (ctx, reply) => {
         const BASE_URL = `${ctx.protocol}://${ctx.hostname}`;
         const accessTokens = ctx.headers.authorization;
         const client = getClient(BASE_URL, accessTokens);
@@ -284,7 +284,7 @@ export function apiStatusMastodon(router: Router): void {
             ctx.body = e.response.data;
         }
     });
-    router.put<{ Params: { id: string } }>('/v1/media/:id',  async (ctx, reply) => {
+    router.put<{ Params: { id: string } }>('/v1/media/:id', koaBody(), async (ctx, reply) => {
         const BASE_URL = `${ctx.protocol}://${ctx.hostname}`;
         const accessTokens = ctx.headers.authorization;
         const client = getClient(BASE_URL, accessTokens);
@@ -310,7 +310,7 @@ export function apiStatusMastodon(router: Router): void {
             ctx.body = e.response.data;
         }
     });
-    router.post<{ Params: { id: string } }>('/v1/polls/:id/votes',  async (ctx, reply) => {
+    router.post<{ Params: { id: string } }>('/v1/polls/:id/votes', koaBody(), async (ctx, reply) => {
         const BASE_URL = `${ctx.protocol}://${ctx.hostname}`;
         const accessTokens = ctx.headers.authorization;
         const client = getClient(BASE_URL, accessTokens);
diff --git a/packages/backend/src/server/index.ts b/packages/backend/src/server/index.ts
index 6ade50d18d..ea4740cbad 100644
--- a/packages/backend/src/server/index.ts
+++ b/packages/backend/src/server/index.ts
@@ -141,7 +141,7 @@ router.get("/oauth/authorize", async (ctx) => {
 	ctx.redirect(Buffer.from(client_id?.toString() || '', 'base64').toString());
 });
 
-router.post("/oauth/token", async (ctx) => {
+router.get("/oauth/token", koaBody(), async (ctx) => {
 	const body: any = ctx.request.body;
 	const BASE_URL = `${ctx.request.protocol}://${ctx.request.hostname}`;
 	const generator = (megalodon as any).default;