CORS & Allowed Origins

Overview

CORS (Cross-Origin Resource Sharing) controls which domains can make API requests from the browser. Configure allowed origins in the dashboard.

Setup

1. Go to Settings → Security
2. Add your storefront domains to the allowed origins list
3. Include both development and production URLs

Example

Allowed Origins:
  https://mystore.com
  https://www.mystore.com
  http://localhost:3000

See CORS Errors for troubleshooting.

Next Steps

• Webhook Signatures
• Customer Data