diff --git a/app/api/__init__.py b/app/api/__init__.py
index c1f0831..935b47a 100644
--- a/app/api/__init__.py
+++ b/app/api/__init__.py
@@ -53,6 +53,9 @@ def register_api(app):
     # ── Phase A (iPad): Reference data ──────────────────────────────────
     from app.api.facilities import bp as facilities_bp
     from app.api.templates  import bp as templates_bp
+    from app import csrf
+    csrf.exempt(facilities_bp)
+    csrf.exempt(templates_bp)
     api_bp.register_blueprint(facilities_bp)
     api_bp.register_blueprint(templates_bp)