CORS Header Generator

Generate Cross-Origin Resource Sharing (CORS) headers for your API

Allowed Origins

Allowed Methods

Allowed Headers

Allow Credentials

Max Age (seconds)

Output Format

Result

CORS Configuration

Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Max-Age: 86400

Format

Headers

WarningsNote: Wildcard origin allows any domain - consider restricting in production

Related Tools

Content Security Policy Generator

Generate Content-Security-Policy headers

Secure Headers Checker

Check your security headers