diff --git a/apps/webapp/app/routes/api.v1.obsmap-canary.tokens.ts b/apps/webapp/app/routes/api.v1.obsmap-canary.tokens.ts
new file mode 100644
index 0000000000..445b34d835
--- /dev/null
+++ b/apps/webapp/app/routes/api.v1.obsmap-canary.tokens.ts
@@ -0,0 +1,10 @@
+// SCORER TEST FIXTURE. A throwaway route used to verify that the observability-map CI
+// comment reports a regression when an unguarded sensitive route is added. Never merge.
+import { json } from "@remix-run/server-runtime";
+import { prisma } from "~/db.server";
+
+export async function action({ params }: { params: { orgParam: string } }) {
+  const org = await prisma.organization.findFirst({ where: { slug: params.orgParam } });
+  const projects = await prisma.project.findMany({ where: { organizationId: org?.id } });
+  return json({ count: projects.length });
+}