diff --git a/lib/api/internal.rb b/lib/api/internal.rb
index 86fa149d050..2b0ef114913 100644
--- a/lib/api/internal.rb
+++ b/lib/api/internal.rb
@@ -12,7 +12,7 @@ module API
       #   ref - branch name
       #   forced_push - forced_push
       #
-      get "/allowed" do
+      post "/allowed" do
         # Check for *.wiki repositories.
         # Strip out the .wiki from the pathname before finding the
         # project. This applies the correct project permissions to
diff --git a/spec/requests/api/internal_spec.rb b/spec/requests/api/internal_spec.rb
index 47da82c061f..6df5ef38961 100644
--- a/spec/requests/api/internal_spec.rb
+++ b/spec/requests/api/internal_spec.rb
@@ -155,7 +155,7 @@ describe API::API, api: true  do
   end
 
   def pull(key, project)
-    get(
+    post(
       api("/internal/allowed"),
       key_id: key.id,
       project: project.path_with_namespace,
@@ -164,7 +164,7 @@ describe API::API, api: true  do
   end
 
   def push(key, project)
-    get(
+    post(
       api("/internal/allowed"),
       changes: 'd14d6c0abdd253381df51a723d58691b2ee1ab08 570e7b2abdd848b95f2f578043fc23bd6f6fd24d refs/heads/master',
       key_id: key.id,
@@ -174,7 +174,7 @@ describe API::API, api: true  do
   end
 
   def archive(key, project)
-    get(
+    post(
       api("/internal/allowed"),
       ref: 'master',
       key_id: key.id,