diff --git a/src/bot/bot.js b/src/bot/bot.js
index 9bee0f8..5edddd3 100644
--- a/src/bot/bot.js
+++ b/src/bot/bot.js
@@ -67,8 +67,8 @@ export function createBot(config, store, appleScraper, googleScraper) {
     listapp: createListAppCommand(store),
     checkapp: createCheckAppCommand(config, store, appleScraper, googleScraper),
     checkappscore: createCheckAppScoresCommand(store, appleScraper, googleScraper),
-    rawappleapp: createRawAppleAppCommand(appleScraper),
-    rawgoogleapp: createRawGoogleAppCommand(googleScraper),
+    rawappleapp: createRawAppleAppCommand(store, appleScraper),
+    rawgoogleapp: createRawGoogleAppCommand(store, googleScraper),
   };
 
   return { sender, commands, api };
diff --git a/src/bot/commands/raw-apple-app.js b/src/bot/commands/raw-apple-app.js
index 82a62f0..7a543fa 100644
--- a/src/bot/commands/raw-apple-app.js
+++ b/src/bot/commands/raw-apple-app.js
@@ -1,8 +1,10 @@
 import { buildAppleRequestByBundleId, buildAppleRequestByTrackId } from '../../api/apple-scraper.js';
+import { authorizeGroup } from './command-utils.js';
 
 // /rawappleapp <id|appId> [country=vn] — sends raw upstream JSON as a document.
-export function createRawAppleAppCommand(appleScraper) {
+export function createRawAppleAppCommand(store, appleScraper) {
   return async (msg, sender, args) => {
+    if (!(await authorizeGroup(msg.chat.id, store, sender))) return;
     if (args.length < 1 || args.length > 2) {
       await sender.sendMessage(msg.chat.id, 'Invalid arguments');
       return;
diff --git a/src/bot/commands/raw-google-app.js b/src/bot/commands/raw-google-app.js
index f3c3ddd..37894aa 100644
--- a/src/bot/commands/raw-google-app.js
+++ b/src/bot/commands/raw-google-app.js
@@ -1,8 +1,10 @@
 import { buildGoogleRequest } from '../../api/google-scraper.js';
+import { authorizeGroup } from './command-utils.js';
 
 // /rawgoogleapp <appId> [country=vn]
-export function createRawGoogleAppCommand(googleScraper) {
+export function createRawGoogleAppCommand(store, googleScraper) {
   return async (msg, sender, args) => {
+    if (!(await authorizeGroup(msg.chat.id, store, sender))) return;
     if (args.length < 1 || args.length > 2) {
       await sender.sendMessage(msg.chat.id, 'Invalid arguments');
       return;