Illustration of a cross-origin request being checked against a server's CORS headers

CORS Header Checker

Enter a URL to check whether it allows cross-origin requests from a given Origin — simulates both the actual request and the preflight (OPTIONS). Up to 20 checks/hour per visitor.


💻 Show API usage examples (cURL)
curl -sS "https://devops.majbase.com/cors-checker/api?url=https://api.example.com/data&origin=https://myapp.example"

Returns {"url", "tested_origin", "status_code", "cors_enabled", "allow_origin", "origin_allowed", "allow_credentials", "expose_headers", "preflight", "warnings"}, or {"error": "..."}. Rate limited to 20 checks/hour per source IP; refuses to connect to a hostname that resolves to a private/internal address.