diff --git a/Iceshrimp.Backend/Controllers/AdminController.cs b/Iceshrimp.Backend/Controllers/AdminController.cs
index 59b5be23..797857b1 100644
--- a/Iceshrimp.Backend/Controllers/AdminController.cs
+++ b/Iceshrimp.Backend/Controllers/AdminController.cs
@@ -28,8 +28,7 @@ public class AdminController(
 	DatabaseContext db,
 	ActivityPubController apController,
 	ActivityPub.ActivityFetcherService fetchSvc,
-	QueueService queueSvc,
-	EmojiService emojiSvc
+	QueueService queueSvc
 ) : ControllerBase
 {
 	[HttpPost("invites/generate")]
@@ -210,81 +209,4 @@ public class AdminController(
 
 		await Response.WriteAsync(activity);
 	}
-	
-	[HttpPost("emoji")]
-	[Produces(MediaTypeNames.Application.Json)]
-	[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(EmojiResponse))]
-	public async Task<IActionResult> UploadEmoji(IFormFile file, [FromServices] IOptions<Config.InstanceSection> config)
-	{
-		var emoji = await emojiSvc.CreateEmojiFromStream(file.OpenReadStream(), file.FileName, file.ContentType, config.Value);
-
-		var res = new EmojiResponse
-		{
-			Id = emoji.Id,
-			Name = emoji.Name,
-			Uri = emoji.Uri,
-			Aliases = [],
-			Category = null,
-			PublicUrl = emoji.PublicUrl,
-			License = null
-		};
-
-		return Ok(res);
-	}
-
-	[HttpGet("emoji/{id}")]
-	[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(EmojiResponse))]
-	[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(ErrorResponse))]
-	public async Task<IActionResult> GetEmoji(string id)
-	{
-		var emoji = await db.Emojis.FirstOrDefaultAsync(p => p.Id == id);
-
-		if (emoji == null) return NotFound();
-		
-		var res = new EmojiResponse
-		{
-			Id        = emoji.Id,
-			Name      = emoji.Name,
-			Uri       = emoji.Uri,
-			Aliases   = emoji.Aliases,
-			Category  = emoji.Category,
-			PublicUrl = emoji.PublicUrl,
-			License   = emoji.License
-		};
-
-		return Ok(res);
-	}
-
-	[HttpPatch("emoji/{id}")]
-	[Consumes(MediaTypeNames.Application.Json)]
-	[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(EmojiResponse))]
-	[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(ErrorResponse))]
-	public async Task<IActionResult> UpdateEmoji(string id, UpdateEmojiRequest request, [FromServices] IOptions<Config.InstanceSection> config)
-	{
-		var emoji = await emojiSvc.UpdateLocalEmoji(id, request.Name, request.Aliases, request.Category,
-		                                            request.License, config.Value);
-		if (emoji == null) return NotFound();
-		
-		var res = new EmojiResponse
-		{
-			Id        = emoji.Id,
-			Name      = emoji.Name,
-			Uri       = emoji.Uri,
-			Aliases   = emoji.Aliases,
-			Category  = emoji.Category,
-			PublicUrl = emoji.PublicUrl,
-			License   = emoji.License
-		};
-
-		return Ok(res);
-	}
-	
-	[HttpDelete("emoji/{id}")]
-	[ProducesResponseType(StatusCodes.Status200OK)]
-	[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(ErrorResponse))]
-	public async Task<IActionResult> DeleteEmoji(string id)
-	{
-		await emojiSvc.DeleteEmoji(id);
-		return Ok();
-	}
 }
diff --git a/Iceshrimp.Backend/Controllers/EmojiController.cs b/Iceshrimp.Backend/Controllers/EmojiController.cs
new file mode 100644
index 00000000..9a78679e
--- /dev/null
+++ b/Iceshrimp.Backend/Controllers/EmojiController.cs
@@ -0,0 +1,126 @@
+using System.Net.Mime;
+using Iceshrimp.Backend.Core.Configuration;
+using Iceshrimp.Backend.Core.Database;
+using Iceshrimp.Backend.Core.Middleware;
+using Iceshrimp.Backend.Core.Services;
+using Iceshrimp.Shared.Schemas;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.RateLimiting;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Options;
+
+namespace Iceshrimp.Backend.Controllers;
+
+[ApiController]
+[Authenticate]
+[Authorize]
+[EnableRateLimiting("sliding")]
+[Route("/api/iceshrimp/emoji")]
+[Produces(MediaTypeNames.Application.Json)]
+public class EmojiController(
+	DatabaseContext db,
+	EmojiService emojiSvc
+) : ControllerBase
+{
+	[HttpGet]
+	[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(IEnumerable<EmojiResponse>))]
+	public async Task<IActionResult> GetAllEmoji()
+	{
+		var res = await db.Emojis
+		                  .Where(p => p.Host == null)
+		                  .Select(p => new EmojiResponse
+		                  {
+			                  Id        = p.Id,
+			                  Name      = p.Name,
+			                  Uri       = p.Uri,
+			                  Aliases   = p.Aliases,
+			                  Category  = p.Category,
+			                  PublicUrl = p.PublicUrl,
+			                  License   = p.License
+		                  })
+		                  .ToListAsync();
+
+		return Ok(res);
+	}
+
+	[HttpPost]
+	[Authorize("role:admin")]
+	[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(EmojiResponse))]
+	public async Task<IActionResult> UploadEmoji(IFormFile file, [FromServices] IOptions<Config.InstanceSection> config)
+	{
+		var emoji = await emojiSvc.CreateEmojiFromStream(file.OpenReadStream(), file.FileName, file.ContentType,
+		                                                 config.Value);
+
+		var res = new EmojiResponse
+		{
+			Id        = emoji.Id,
+			Name      = emoji.Name,
+			Uri       = emoji.Uri,
+			Aliases   = [],
+			Category  = null,
+			PublicUrl = emoji.PublicUrl,
+			License   = null
+		};
+
+		return Ok(res);
+	}
+
+	[HttpPatch("{id}")]
+	[Authorize("role:admin")]
+	[Consumes(MediaTypeNames.Application.Json)]
+	[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(EmojiResponse))]
+	[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(ErrorResponse))]
+	public async Task<IActionResult> UpdateEmoji(
+		string id, UpdateEmojiRequest request, [FromServices] IOptions<Config.InstanceSection> config
+	)
+	{
+		var emoji = await emojiSvc.UpdateLocalEmoji(id, request.Name, request.Aliases, request.Category,
+		                                            request.License, config.Value);
+		if (emoji == null) return NotFound();
+
+		var res = new EmojiResponse
+		{
+			Id        = emoji.Id,
+			Name      = emoji.Name,
+			Uri       = emoji.Uri,
+			Aliases   = emoji.Aliases,
+			Category  = emoji.Category,
+			PublicUrl = emoji.PublicUrl,
+			License   = emoji.License
+		};
+
+		return Ok(res);
+	}
+
+	[HttpGet("{id}")]
+	[ProducesResponseType(StatusCodes.Status200OK, Type = typeof(EmojiResponse))]
+	[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(ErrorResponse))]
+	public async Task<IActionResult> GetEmoji(string id)
+	{
+		var emoji = await db.Emojis.FirstOrDefaultAsync(p => p.Id == id);
+
+		if (emoji == null) return NotFound();
+
+		var res = new EmojiResponse
+		{
+			Id        = emoji.Id,
+			Name      = emoji.Name,
+			Uri       = emoji.Uri,
+			Aliases   = emoji.Aliases,
+			Category  = emoji.Category,
+			PublicUrl = emoji.PublicUrl,
+			License   = emoji.License
+		};
+
+		return Ok(res);
+	}
+
+	[HttpDelete("emoji/{id}")]
+	[ProducesResponseType(StatusCodes.Status200OK)]
+	[ProducesResponseType(StatusCodes.Status404NotFound, Type = typeof(ErrorResponse))]
+	public async Task<IActionResult> DeleteEmoji(string id)
+	{
+		await emojiSvc.DeleteEmoji(id);
+		return Ok();
+	}
+}
\ No newline at end of file