> For the complete documentation index, see [llms.txt](https://fusionauth.io/docs/llms.txt)

# Configure CORS

How to set up and use the FusionAuth API Explorer.

# Configure CORS

To make in-browser API calls from the API Reference, you must configure CORS (Cross-Origin Resource Sharing) for your local FusionAuth instance. This is not required if you only use the generated `curl` commands to call the API from the command line.

caution

Only use this configuration for development and testing instances of FusionAuth.

**Do not run your production FusionAuth instance with CORS configured this openly.**

To set up CORS to allow :

1.  Log in to your FusionAuth administrative user interface.
2.  Navigate to Settings -> System .
3.  Enable **CORS**.
4.  Add `authorization`, `accept`, and `content-type` to the list of **Allowed headers**. Use the **ENTER** key to add each of these separately -- do not add them as a comma-separated list.
5.  Enable all the **Allowed methods**.
6.  Add `fusionauth.io` to the list of **Allowed origins**.

You can also set **Allowed origins** to `*` to allow requests from any origin.