diff --git a/tests/test_core/test_public_read_surface.py b/tests/test_core/test_public_read_surface.py
index 3e1f2b4c..c134ec16 100644
--- a/tests/test_core/test_public_read_surface.py
+++ b/tests/test_core/test_public_read_surface.py
@@ -26,6 +26,11 @@ PUBLIC_ENDPOINTS = {
     'setup.needs_admin',
     'auth.get_current_user',
     'plugins.list_enabled_plugins',
+    'plugins.get_plugin_settings_routes',  # plugin-contributed settings routes
+                                           # for dynamic UI extension; must answer
+                                           # unauthenticated pages (kiosks, TV
+                                           # displays) so they can register plugin
+                                           # tabs before login
     'dashboard.get_navigation',      # filtered per caller; a guest sees only
                                      # what the guest role can reach
     'dashboard.get_capabilities',    # booleans about the CALLER, used to decide