CORS tester
Check cross-origin headers and preflight responses.
This check runs on the server. Input and results are not saved as execution history; hosted allowances apply.
About CORS tester
Send a public preflight request and inspect CORS response headers for a chosen origin, method, and header set.
When to use it
Diagnose an API’s preflight configuration.
OPTIONS with Origin and Access-Control-Request-MethodHow to use it
- Enter a URL and the intended request context.
- Inspect the returned preflight headers and checks.
Limits & privacy
Only public HTTP/HTTPS targets on ports 80, 443, 8080, or 8443. Private, loopback, link-local, and reserved IP ranges are blocked on every hop. Up to five redirects, 256 KiB response data, and a ten-second overall deadline. No cookies or user credentials are sent. No cookies are sent. Header checks are diagnostic and do not replace a complete browser integration test.
Use this tool from the API reference or connect through the SDK, CLI, SSH, or MCP. Hosted calls share your plan allowances.