CORS checker and tester

Run a real request from this page to any URL and see what the browser does with it: whether the server answers at all, whether your request needs a preflight, and which Access-Control header is missing. Everything happens in your browser. We never see the URL.

How to read the result

Full explanation and every fix, including localhost ports and preflight failures: CORS error: what it means and how to fix it.

Testing against a server you can't change?

HeaderForge adds the Access-Control-* headers in your own browser with one click, scoped to one site, so you can carry on while the server team fixes it properly. Free, no analytics, no account.

Get HeaderForge for Chrome