diff --git a/packages/storage-uploadthing/README.md b/packages/storage-uploadthing/README.md
index 595fa3597da..52f8152c29b 100644
--- a/packages/storage-uploadthing/README.md
+++ b/packages/storage-uploadthing/README.md
@@ -11,7 +11,7 @@ pnpm add @payloadcms/storage-uploadthing
 ## Usage
 
 - Configure the `collections` object to specify which collections should use uploadthing. The slug _must_ match one of your existing collection slugs and be an `upload` type.
-- Get an API key from Uploadthing and set it as `apiKey` in the `options` object.
+- Get an API key from Uploadthing and set it as `apiKey` in the `options` object. **Note: This plugin expects a key in JWT format**. Make sure the token you copy from the Uploadthing dashboard starts with `ey` and not `sk_`.
 - `acl` is optional and defaults to `public-read`.
 - When deploying to Vercel, server uploads are limited with 4.5MB. Set `clientUploads` to `true` to do uploads directly on the client.
 
diff --git a/packages/storage-uploadthing/src/handleUpload.ts b/packages/storage-uploadthing/src/handleUpload.ts
index 73875111663..6263c24d983 100644
--- a/packages/storage-uploadthing/src/handleUpload.ts
+++ b/packages/storage-uploadthing/src/handleUpload.ts
@@ -40,9 +40,11 @@ export const getHandleUpload = ({ acl, utApi }: HandleUploadArgs): HandleUpload
 
       if (foundSize) {
         data.sizes[foundSize]._key = res.data?.key
+        data.sizes[foundSize].url = res.data?.url
       } else {
         data._key = res.data?.key
         data.filename = res.data?.name
+        data.url = res.data?.url
       }
 
       return data
diff --git a/packages/storage-uploadthing/src/index.ts b/packages/storage-uploadthing/src/index.ts
index 01ca956306f..ae33210fea9 100644
--- a/packages/storage-uploadthing/src/index.ts
+++ b/packages/storage-uploadthing/src/index.ts
@@ -106,9 +106,9 @@ export const uploadthingStorage: UploadthingPlugin =
           ...(collOptions === true ? {} : collOptions),
 
           // Disable payload access control if the ACL is public-read or not set
-          // ...(uploadthingStorageOptions.options.acl === 'public-read'
-          //   ? { disablePayloadAccessControl: true }
-          //   : {}),
+          ...(uploadthingStorageOptions.options.acl === 'public-read'
+            ? { disablePayloadAccessControl: true }
+            : {}),
 
           adapter,
         },