diff --git a/src/routes/messages.js b/src/routes/messages.js
index 59e647b..26bc842 100644
--- a/src/routes/messages.js
+++ b/src/routes/messages.js
@@ -127,11 +127,17 @@ router.use(authenticateToken);
  *                   type: string
  */
 router.post('/list', async (req, res) => {
+    if (!req.body.temp_email_id) {
+        return res.status(400).json({ error: 'temp_email_id is required' });
+    }
     const messages = await Message.query().where('temp_email_id', req.body.temp_email_id);
     res.json(messages);
 });
 
 router.post('/read/:id', async (req, res) => {
+    if (!req.body.id) {
+        return res.status(400).json({ error: 'id is required' });
+    }
     const message = await Message.query().where('id', req.body.id).withGraphFetched('temp_email').first();
     res.json(message);
 });