diff --git a/packages/server/src/site/SiteRoutes.test.ts b/packages/server/src/site/SiteRoutes.test.ts
index 9055fa1..0fae056 100644
--- a/packages/server/src/site/SiteRoutes.test.ts
+++ b/packages/server/src/site/SiteRoutes.test.ts
@@ -51,4 +51,26 @@ describe('team', () => {
 
   })
 
+  describe('GET /teams/:teamId/sites/:id', () => {
+    it('fetches a site belonging to a team', async () => {
+      const site = await createSite(t, 'test.example.com')
+      const response = await t.get('/teams/:teamId/sites/:id', {
+        teamId: site.teamId,
+        id: site.id,
+      })
+      .expect(200)
+      expect(response.body!.id).toEqual(site.id)
+    })
+  })
+
+  describe('GET /teams/:teamId/sites', () => {
+    it('fetches all sites belonging to a team', async () => {
+      const site = await createSite(t, 'test.example.com')
+      const response = await t.get('/teams/:teamId/sites', {
+        teamId: site.teamId,
+      })
+      expect(response.body.map(s => s.id)).toContain(site.id)
+    })
+  })
+
 })
diff --git a/packages/server/src/site/SiteRoutes.ts b/packages/server/src/site/SiteRoutes.ts
index 657fb60..7de6075 100644
--- a/packages/server/src/site/SiteRoutes.ts
+++ b/packages/server/src/site/SiteRoutes.ts
@@ -32,6 +32,7 @@ export class SiteRoutes extends BaseRoute<IAPIDef> {
 
     t.use(ensureLoggedInApi)
 
+    // TODO do not use this one without teamId
     t.get('/my/sites', async req => {
       return this.siteService.findByUser(req.user!.id)
     })