diff --git a/src/intTest/kotlin/mastodon/filter/FilterTest.kt b/src/intTest/kotlin/mastodon/filter/FilterTest.kt
index 1ac8bea0..30d67371 100644
--- a/src/intTest/kotlin/mastodon/filter/FilterTest.kt
+++ b/src/intTest/kotlin/mastodon/filter/FilterTest.kt
@@ -2,8 +2,11 @@ package mastodon.filter
 
 import dev.usbharu.hideout.SpringApplication
 import dev.usbharu.hideout.application.config.ActivityPubConfig
+import dev.usbharu.hideout.domain.mastodon.model.generated.FilterKeywordsPostRequest
 import dev.usbharu.hideout.domain.mastodon.model.generated.FilterPostRequest
 import dev.usbharu.hideout.domain.mastodon.model.generated.FilterPostRequestKeyword
+import dev.usbharu.hideout.domain.mastodon.model.generated.V1FilterPostRequest
+import kotlinx.coroutines.test.runTest
 import org.flywaydb.core.Flyway
 import org.junit.jupiter.api.AfterAll
 import org.junit.jupiter.api.BeforeEach
@@ -13,10 +16,11 @@ import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMock
 import org.springframework.boot.test.context.SpringBootTest
 import org.springframework.http.MediaType
 import org.springframework.security.core.authority.SimpleGrantedAuthority
-import org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors
+import org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors.jwt
 import org.springframework.security.test.web.servlet.setup.SecurityMockMvcConfigurers
 import org.springframework.test.context.jdbc.Sql
 import org.springframework.test.web.servlet.MockMvc
+import org.springframework.test.web.servlet.delete
 import org.springframework.test.web.servlet.get
 import org.springframework.test.web.servlet.post
 import org.springframework.test.web.servlet.setup.DefaultMockMvcBuilder
@@ -27,7 +31,7 @@ import org.springframework.web.context.WebApplicationContext
 @SpringBootTest(classes = [SpringApplication::class])
 @AutoConfigureMockMvc
 @Transactional
-@Sql("/sql/test-user.sql", executionPhase = Sql.ExecutionPhase.BEFORE_TEST_CLASS)
+@Sql("/sql/test-user.sql", "/sql/filter/test-filter.sql", executionPhase = Sql.ExecutionPhase.BEFORE_TEST_CLASS)
 class FilterTest {
     @Autowired
     private lateinit var context: WebApplicationContext
@@ -62,7 +66,7 @@ class FilterTest {
                     )
                 )
                 with(
-                    SecurityMockMvcRequestPostProcessors.jwt()
+                    jwt()
                         .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
                 )
             }
@@ -98,7 +102,7 @@ class FilterTest {
                     )
                 )
                 with(
-                    SecurityMockMvcRequestPostProcessors.jwt()
+                    jwt()
                         .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write:filters"))
                 )
             }
@@ -134,7 +138,7 @@ class FilterTest {
                     )
                 )
                 with(
-                    SecurityMockMvcRequestPostProcessors.jwt()
+                    jwt()
                         .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
                 )
             }
@@ -146,7 +150,7 @@ class FilterTest {
         mockMvc
             .get("/api/v2/filters") {
                 with(
-                    SecurityMockMvcRequestPostProcessors.jwt()
+                    jwt()
                         .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
                 )
             }
@@ -159,7 +163,7 @@ class FilterTest {
         mockMvc
             .get("/api/v2/filters") {
                 with(
-                    SecurityMockMvcRequestPostProcessors.jwt()
+                    jwt()
                         .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
                 )
             }
@@ -172,13 +176,513 @@ class FilterTest {
         mockMvc
             .get("/api/v2/filters") {
                 with(
-                    SecurityMockMvcRequestPostProcessors.jwt()
+                    jwt()
                         .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
                 )
             }
             .andExpect { status { isForbidden() } }
     }
 
+    @Test
+    fun `apiV2FiltersIdGet read権限で取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+
+    @Test
+    fun `apiV2FiltersIdGet read_filters権限で取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersIdGet write権限で401`() {
+        mockMvc
+            .get("/api/v2/filters/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdKeywordsGet read権限で取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/1/keywords") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdKeywordsGet read_filters権限で取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/1/keywords") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdKeywordsGet writeで403`() {
+        mockMvc
+            .get("/api/v2/filters/1/keywords") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdKeywordsPost writeで追加できる`() {
+        mockMvc
+            .post("/api/v2/filters/1/keywords") {
+                contentType = MediaType.APPLICATION_JSON
+                content = ActivityPubConfig().objectMapper().writeValueAsString(
+                    FilterKeywordsPostRequest(
+                        "hage", false, false
+                    )
+                )
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdKeywordsPost write_filtersで追加できる`() {
+        mockMvc
+            .post("/api/v2/filters/1/keywords") {
+                contentType = MediaType.APPLICATION_JSON
+                content = ActivityPubConfig().objectMapper().writeValueAsString(
+                    FilterKeywordsPostRequest(
+                        "hage", false, false
+                    )
+                )
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdKeywordsPost readで403`() {
+        mockMvc
+            .post("/api/v2/filters/1/keywords") {
+                contentType = MediaType.APPLICATION_JSON
+                content = ActivityPubConfig().objectMapper().writeValueAsString(
+                    FilterKeywordsPostRequest(
+                        "hage", false, false
+                    )
+                )
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV2FiltersKeywordsIdGet readで取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/keywords/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersKeywordsIdGet read_filtersで取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/keywords/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersKeywordsIdGet writeだと403`() {
+        mockMvc
+            .get("/api/v2/filters/keywords/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV2FiltersKeyowrdsIdDelete writeで削除できる`() = runTest {
+        mockMvc
+            .delete("/api/v2/filters/keywords/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersKeyowrdsIdDelete write_filtersで削除できる`() = runTest {
+        mockMvc
+            .delete("/api/v2/filters/keywords/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersKeyowrdsIdDelete readで403`() = runTest {
+        mockMvc
+            .delete("/api/v2/filters/keywords/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdStatuses readで取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/1/statuses") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdStatuses read_filtersで取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/1/statuses") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersFilterIdStatuses writeで403`() {
+        mockMvc
+            .get("/api/v2/filters/1/statuses") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV2FiltersStatusesIdGet readで取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/statuses/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersStatusesIdGet read_filtersで取得できる`() {
+        mockMvc
+            .get("/api/v2/filters/statuses/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersStatusesIdGet writeで403`() {
+        mockMvc
+            .get("/api/v2/filters/statuses/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV2FiltersStatusesIdDelete writeで削除できる`() {
+        mockMvc
+            .delete("/api/v2/filters/statuses/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersStatusesIdDelete write_filtersで削除できる`() {
+        mockMvc
+            .delete("/api/v2/filters/statuses/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV2FiltersStatusesIdDelete readで403`() {
+        mockMvc
+            .delete("/api/v2/filters/statuses/1") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV1FiltersGet readで取得できる`() {
+        mockMvc
+            .get("/api/v1/filters") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersGet read_filtersで取得できる`() {
+        mockMvc
+            .get("/api/v1/filters") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersGet writeで403`() {
+        mockMvc
+            .get("/api/v1/filters") {
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV1FiltersPost writeで新規作成`() {
+        mockMvc
+            .post("/api/v1/filters") {
+                contentType = MediaType.APPLICATION_JSON
+                content = ActivityPubConfig().objectMapper().writeValueAsString(
+                    V1FilterPostRequest(
+                        phrase = "hoge",
+                        context = listOf(V1FilterPostRequest.Context.home),
+                        irreversible = false,
+                        wholeWord = false,
+                        expiresIn = null
+                    )
+                )
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersPost write_filtersで新規作成`() {
+        mockMvc
+            .post("/api/v1/filters") {
+                contentType = MediaType.APPLICATION_JSON
+                content = ActivityPubConfig().objectMapper().writeValueAsString(
+                    V1FilterPostRequest(
+                        phrase = "hoge",
+                        context = listOf(V1FilterPostRequest.Context.home),
+                        irreversible = false,
+                        wholeWord = false,
+                        expiresIn = null
+                    )
+                )
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersPost readで403`() {
+        mockMvc
+            .post("/api/v1/filters") {
+                contentType = MediaType.APPLICATION_JSON
+                content = ActivityPubConfig().objectMapper().writeValueAsString(
+                    V1FilterPostRequest(
+                        phrase = "hoge",
+                        context = listOf(V1FilterPostRequest.Context.home),
+                        irreversible = false,
+                        wholeWord = false,
+                        expiresIn = null
+                    )
+                )
+                with(
+                    jwt()
+                        .jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV1FiltersIdGet readで取得できる`() {
+        mockMvc
+            .get("/api/v1/filters/1") {
+                with(
+                    jwt().jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersIdGet read_filtersで取得できる`() {
+        mockMvc
+            .get("/api/v1/filters/1") {
+                with(
+                    jwt().jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_read:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersIdGet writeで403`() {
+        mockMvc
+            .get("/api/v1/filters/1") {
+                with(
+                    jwt().jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .andExpect { status { isForbidden() } }
+    }
+
+    @Test
+    fun `apiV1FiltersIdDelete writeで削除できる`() {
+        mockMvc
+            .delete("/api/v1/filters/1") {
+                with(
+                    jwt().jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersIdDelete write_filtersで削除できる`() {
+        mockMvc
+            .delete("/api/v1/filters/1") {
+                with(
+                    jwt().jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write:filters"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
+    @Test
+    fun `apiV1FiltersIdDelete readで403`() {
+        mockMvc
+            .delete("/api/v1/filters/1") {
+                with(
+                    jwt().jwt { it.claim("uid", "1") }.authorities(SimpleGrantedAuthority("SCOPE_write"))
+                )
+            }
+            .asyncDispatch()
+            .andExpect { status { isOk() } }
+    }
+
     companion object {
         @JvmStatic
         @AfterAll
diff --git a/src/intTest/resources/sql/filter/test-filter.sql b/src/intTest/resources/sql/filter/test-filter.sql
new file mode 100644
index 00000000..d06d6bc0
--- /dev/null
+++ b/src/intTest/resources/sql/filter/test-filter.sql
@@ -0,0 +1,4 @@
+insert into filters (id, user_id, name, context, action)
+VALUES (1, 1, 'test filter', 'home', 'warn');
+insert into filter_keywords(id, filter_id, keyword, mode)
+VALUES (1, 1, 'hoge', 'NONE')
\ No newline at end of file