diff --git a/docker-compose.yml b/docker-compose.yml
index 8a76146..b7dfee3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -43,7 +43,7 @@ services:
       - OLLAMA_URL=${OLLAMA_URL:-http://192.168.45.59:11435}
       - OLLAMA_MODEL=${OLLAMA_MODEL:-qwen3:14b}
       - CORS_ALLOW_ORIGINS=${CORS_ALLOW_ORIGINS:-http://localhost:3007,http://localhost:8080}
-      - WEBAI_API_KEY=${WEBAI_API_KEY}
+      - WEBAI_API_KEY=${WEBAI_API_KEY:-}
     volumes:
       - ${RUNTIME_PATH}/data/stock:/app/data
     healthcheck:
diff --git a/stock/app/auth.py b/stock/app/auth.py
index 42174d6..e4b1dcb 100644
--- a/stock/app/auth.py
+++ b/stock/app/auth.py
@@ -6,6 +6,8 @@ from starlette.requests import Request
 
 logger = logging.getLogger("stock")
 
+_WEBAI_AUTH_WARNED = False
+
 
 def verify_webai_key(
     request: Request,
@@ -14,14 +16,21 @@ def verify_webai_key(
     """
     /api/webai/* 보호용 FastAPI dependency.
 
-    - WEBAI_API_KEY env 미설정 → 503 (다른 endpoint 무영향)
+    - WEBAI_API_KEY env 미설정 → 503 (다른 endpoint 무영향). 1회만 ERROR 로그.
     - 헤더 누락 또는 키 불일치 → 401 + logger.warning(ip)
     """
+    global _WEBAI_AUTH_WARNED
     configured = os.getenv("WEBAI_API_KEY", "").strip()
     if not configured:
-        logger.error("WEBAI_API_KEY not configured — refusing /api/webai/* request")
+        if not _WEBAI_AUTH_WARNED:
+            logger.error("WEBAI_API_KEY not configured — refusing /api/webai/* requests")
+            _WEBAI_AUTH_WARNED = True
         raise HTTPException(status_code=503, detail="webai auth not configured")
 
+    # env 가 다시 설정되면 flag 해제 → 미래 regression 시 다시 알림
+    if _WEBAI_AUTH_WARNED:
+        _WEBAI_AUTH_WARNED = False
+
     if not x_webai_key or x_webai_key != configured:
         remote = request.client.host if request.client else "?"
         logger.warning("auth_fail path=%s remote=%s", request.url.path, remote)