ToolAssay

CORS check (preflight + allowed origins)

CORS check (preflight + allowed origins): Will a browser on a given origin be allowed to call this URL: sends a CORS preflight (OPTIONS) and a GET with Origin, reports Access-Control-Allow-Origin / Credentials / Methods / Headers / Max-Age, Vary: Origin, and flags arbitrary-origin reflection, wildca

Not tested: has real-world effectsour last check, 2026-10-27
0 of 0checks answered this week
n/amedian answer time
$0.01listed price per call
n/aprice it asked us

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

GET https://shop.lordevo.com/api/quick/cors-check

CategoryEverything else
Provider hostshop.lordevo.com
Networkseip155:8453
Payment schemesexact
Self-reported calls, 30 days0 from 0 payers (the provider's figure, not ours)

Our checks, last 30 days

We never call tools that send, buy, move money or file anything, not even without paying.

Example input (from the provider)

{
  "method": "GET",
  "queryParams": {
    "url": "https://example.com"
  },
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "method": {
          "enum": [
            "GET"
          ],
          "type": "string"
        },
        "queryParams": {
          "properties": {
            "method": {
              "default": "GET",
              "description": "Method for the preflight",
              "enum": [
                "GET",
                "POST",
                "PUT",
                "PATCH",
                "DELETE"
              ],
              "type": "string"
            },
            "origin": {
              "default": "https://example.com",
              "description": "Origin to test, e.g. https://app.example.com",
              "pattern": "^https?://[a-zA-Z0-9.-]+(:\\d{1,5})?$",
              "type": "string"
            },
            "url": {
              "description": "Public http(s) URL or bare domain, e.g. https://example.com",
              "type": "string"
            }
          },
          "required": [
            "url"
          ],
          "type": "object"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "properties": {
            "allow_credentials": {
              "type": "boolean"
            },
            "allow_origin": {
              "type": [
                "string",
                "null"
              ]
            },
            "allowed": {
              "type": "boolean"
            },
            "issues": {
              "type": "array"
            },
            "origin": {
              "type": "string"
            },
            "reflects_arbitrary_origin": {
              "type": [
                "boolean",
                "null"
              ]
            },
            "tool": {
              "type": "string"
            },
            "url": {
              "type": "string"
            }
          },
          "required": [
            "tool",
            "url",
            "allowed"
          ],
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}

This page as JSON