Corsfix

About Corsfix

Corsfix is a CORS proxy service that allows requests to be sent to a target API or URL by prepending the proxy address to it, either as a query string, a "url" query parameter, or directly in the path. The proxy adds CORS headers to responses, including Access-Control-Allow-Origin and Access-Control-Expose-Headers, and automatically handles preflight requests so that cross-origin requests succeed without additional configuration.

There is no size limit on response data returned through the proxy, but request payloads sent to the proxy are capped at 5MB, returning a 413 status if exceeded. Requests that take longer than 20 seconds to complete return a 504 Gateway Timeout.

By default, the proxy identifies requests through domain whitelisting configured in a dashboard, with no API key required. An API key can be used instead by passing it in the x-corsfix-key header, though this exposes the key on the client side. A Lite plan is available, which uses a separate proxy URL (lite.corsfix.com). The service is intended for developers who need to make client-side requests to APIs that do not support CORS.

Key features

• Proxy any URL by prepending it as query string, query parameter, or path
• Automatically adds CORS headers (Access-Control-Allow-Origin, Access-Control-Expose-Headers) to responses
• Automatically handles preflight requests
• No size limit on response data, with a 5MB payload limit for requests sent to the proxy
• Domain whitelisting for automatic request detection, or API key auth via x-corsfix-key header

Frequently asked questions