diff --git a/core/server/web/api/canary/admin/routes.js b/core/server/web/api/canary/admin/routes.js
index d6058d07e6..5f6a01d1d0 100644
--- a/core/server/web/api/canary/admin/routes.js
+++ b/core/server/web/api/canary/admin/routes.js
@@ -238,6 +238,7 @@ module.exports = function apiRoutes() {
 
     // ## media
     router.post('/media/upload',
+        labs.enabledMiddleware('mediaAPI'),
         mw.authAdminApi,
         apiMw.upload.media('file', 'thumbnail'),
         apiMw.upload.mediaValidation({type: 'media'}),
diff --git a/core/shared/labs.js b/core/shared/labs.js
index 50c5a659ab..4195f64e36 100644
--- a/core/shared/labs.js
+++ b/core/shared/labs.js
@@ -29,6 +29,7 @@ const ALPHA_FEATURES = [
     'oauthLogin',
     'membersActivity',
     'cardSettingsPanel',
+    'mediaAPI',
     'membersAutoLogin'
 ];