Those Boring Tools
Security ToolsPrivate by design

CORS Header Generator

Enter your allowed origin, methods, and headers to generate the CORS response headers to add to your server.

How to use this tool

  1. 1Enter the allowed origin.
  2. 2Enter allowed methods and headers.
  3. 3Toggle credentials and set a max age.
  4. 4Copy the generated headers.

Frequently asked questions

Can I use a wildcard origin with credentials?+

No — browsers reject Access-Control-Allow-Origin: * combined with Access-Control-Allow-Credentials: true. Use a specific origin if credentials are needed.

Related tools

Keep the boring tools boring.

If this saved you five minutes of nonsense, you can help keep the free tools running.

Buy the toolbox a coffee