diff --git a/my/core/denylist.py b/my/core/denylist.py
index f29c182..3344579 100644
--- a/my/core/denylist.py
+++ b/my/core/denylist.py
@@ -103,6 +103,8 @@ having to mix data filtering logic with parsing/loading/caching (the stuff HPI d
 """
 
 # https://github.com/seanbreckenridge/pyfzf
+# TODO: add pip install instructions for this to docs, cant use REQUIRES because
+# this a core module and not discovered to be installed with `hpi module install`
 REQUIRES = ["pyfzf_iter"]
 
 import json
diff --git a/tox.ini b/tox.ini
index 6e7ca23..dbe9f9c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -44,6 +44,9 @@ commands =
     pip install cachew
     pip install orjson
 
+    # for my.core.denylist
+    pip install pyfzf_iter
+
     hpi module install my.location.google
     pip install ijson # optional dependency