diff --git a/web/workspace/src/routes/w/[workspaceId]/settings/repositories/+page.svelte b/web/workspace/src/routes/w/[workspaceId]/settings/repositories/+page.svelte
index 8e9e7c8d..961a7d79 100644
--- a/web/workspace/src/routes/w/[workspaceId]/settings/repositories/+page.svelte
+++ b/web/workspace/src/routes/w/[workspaceId]/settings/repositories/+page.svelte
@@ -13,7 +13,7 @@
   }
 
   function supportsRepositoryAccess(kind: RepositorySourceKind): boolean {
-    return kind === 'ssh' || kind === 'http' || kind === 'https';
+    return kind === 'ssh' || kind === 'https';
   }
   let showAddRepository = $state(false);
   let repositoryKey = $state('');
diff --git a/web/workspace/tests/workspace-model.test.ts b/web/workspace/tests/workspace-model.test.ts
index b50b10b8..cd0a3040 100644
--- a/web/workspace/tests/workspace-model.test.ts
+++ b/web/workspace/tests/workspace-model.test.ts
@@ -255,6 +255,15 @@ Deno.test("Repository settings consume the validated shared wire shape", async (
       throw new Error(`Repository settings should include ${token}`);
     }
   }
+  for (const kind of ["ssh", "https"]) {
+    if (!pageSource.includes(`kind === '${kind}'`)) {
+      throw new Error(`Repository Access should support ${kind}`);
+    }
+  }
+  if (pageSource.includes("kind === 'http'")) {
+    throw new Error("Repository Access must not support plain HTTP sources");
+  }
+
   for (
     const staleToken of [
       "repository.id",