{"slug":"shop-lordevo-com-api-quick-cors-check-eda2eb","title":"CORS check (preflight + allowed origins)","host":"shop.lordevo.com","method":"GET","resource":"https://shop.lordevo.com/api/quick/cors-check","category":"other","description":"CORS check (preflight + allowed origins): Will a browser on a given origin be allowed to call this URL: sends a CORS preflight (OPTIONS) and a GET with Origin, reports Access-Control-Allow-Origin / Credentials / Methods / Headers / Max-Age, Vary: Origin, and flags arbitrary-origin reflection, wildca","price_listed":0.01,"price_asked":null,"state":"effects","state_label":"Not tested: has real-world effects","checks_7d":0,"answered_7d":0,"latency_ms_median":null,"reported_calls_30d":0,"reported_payers_30d":0,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"url":"https://example.com"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"method":{"default":"GET","description":"Method for the preflight","enum":["GET","POST","PUT","PATCH","DELETE"],"type":"string"},"origin":{"default":"https://example.com","description":"Origin to test, e.g. https://app.example.com","pattern":"^https?://[a-zA-Z0-9.-]+(:\\d{1,5})?$","type":"string"},"url":{"description":"Public http(s) URL or bare domain, e.g. https://example.com","type":"string"}},"required":["url"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"allow_credentials":{"type":"boolean"},"allow_origin":{"type":["string","null"]},"allowed":{"type":"boolean"},"issues":{"type":"array"},"origin":{"type":"string"},"reflects_arbitrary_origin":{"type":["boolean","null"]},"tool":{"type":"string"},"url":{"type":"string"}},"required":["tool","url","allowed"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[],"description_full":"CORS check (preflight + allowed origins): Will a browser on a given origin be allowed to call this URL: sends a CORS preflight (OPTIONS) and a GET with Origin, reports Access-Control-Allow-Origin / Credentials / Methods / Headers / Max-Age, Vary: Origin, and flags arbitrary-origin reflection, wildca","last_updated":"2026-10-27T14:20:57.941Z","schemes":["exact"]}