CORS Policy Analyzer

Check origin matching, credential requirements, likely preflight needs, allowed methods/headers and Vary: Origin guidance for one request scenario.

Request origin

Method

Request headers — Name: valueResponse CORS headers — Name: value

Credential mode include

This evaluates the headers you paste. It does not contact the server or bypass browser same-origin/CORS enforcement.

—Likely preflight

—Checks

—Failures

—Warnings

Explicit HTTP-tool scope

The analyzer checks the supplied request scenario and response headers only; the real browser/server exchange remains the authority.

Analyze supplied CORS response headers against a request origin, method, headers and credential mode without making a network request.