diff --git a/lib/index-api.js b/lib/index-api.js
index 58aa50ef..615e67d3 100644
--- a/lib/index-api.js
+++ b/lib/index-api.js
@@ -3,6 +3,7 @@ var Cookies       = require('cookies')
 var express       = require('express')
 var expressJson5  = require('express-json5')
 var Error         = require('http-errors')
+var load_plugins  = require('./plugin-loader').load_plugins
 var Path          = require('path')
 var Middleware    = require('./middleware')
 var Utils         = require('./utils')
@@ -34,6 +35,14 @@ module.exports = function(config, auth, storage) {
   app.use(expressJson5({ strict: false, limit: config.max_body_size || '10mb' }))
   app.use(Middleware.anti_loop(config))
 
+  // custom middleware
+  var custom_middleware = load_plugins(config, config.middleware, {}, function () {
+    return true
+  })
+  for (var i=0; i<custom_middleware.length; i++) {
+    app.use(custom_middleware)
+  }
+
   // for "npm whoami"
   app.get('/whoami', function(req, res, next) {
     if (req.headers.referer === 'whoami') {
@@ -398,4 +407,3 @@ module.exports = function(config, auth, storage) {
 
   return app
 }
-