---
title: "Configure the CORS settings."
method: POST
path: "/sys/config/cors"
tags: ["system"]
---

# Configure the CORS settings.

`POST /sys/config/cors`

## Request body

- SystemConfigCorsRequest
  - `allowed_headers` string[] — A comma-separated string or array of strings indicating headers that are allowed on cross-origin requests.
  - `allowed_origins` string[] — A comma-separated string or array of strings indicating origins that may make cross-origin requests.
  - `enable` boolean — Enables or disables CORS headers on requests.

## Response `200`

OK

---

[API](https://skmtc.net/lensesio/apis/hashicorp-vault-api.md) · [All operations](https://skmtc.net/lensesio/apis/hashicorp-vault-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lensesio/hashicorp-vault-api/versions/bd8194de0697/schema)