Evaluate a CORS request

Code snippets

curl "https://api.oanor.com/cors-api/v1/check" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/cors-api/v1/check", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/cors-api/v1/check");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/cors-api/v1/check",
    headers={"x-oanor-key": "oanor_test_..."}
)

Example response

A real response from this endpoint, captured by the latest health check.

{
    "data": {
        "method": "POST",
        "origin": "https://app.example.com",
        "allowed": true,
        "reasons": [],
        "response_headers": {
            "Access-Control-Allow-Origin": "*",
            "Access-Control-Allow-Headers": "Content-Type, Authorization",
            "Access-Control-Allow-Methods": "GET, POST, PUT, PATCH, DELETE, OPTIONS"
        }
    },
    "meta": {
        "timestamp": "2026-06-03T09:25:00.551Z",
        "request_id": "cef1e3d1-c2ff-4613-9cc4-1eec41db1622"
    },
    "status": "ok",
    "message": "Evaluate a CORS request",
    "success": true
}