CORS Preflight Header Analyzer

Model the request with the available fields. No request is sent; server behavior and header-value restrictions need separate testing.

Runs locally in your browser

Browser request and copied response headersThis checker models browser rules only; it does not contact the API or replay credentials.

Request Origin

Request method

Requested headers

Include credentials (cookies or HTTP auth)

Response headers