CORS & Allowed Origins

Overview

CORS (Cross-Origin Resource Sharing) controls which domains can make API requests from the browser. Configure allowed origins in the dashboard.

Setup

1. Go to Settings → Security
2. Add your storefront domains to the allowed origins list
3. Include both development and production URLs