> ## Documentation Index
> Fetch the complete documentation index at: https://docs.arc.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Cross-Origin Resource Sharing (CORS)

> Configure CORS for the CData Arc Admin API to allow browser-based clients to connect.

You can configure cross-origin resource sharing (CORS) for the Admin API by navigating to the [Admin API](https://docs.arc.cdata.com/26.4/cloud/en/admin-api/admin-api.md) portion of the [Security tab](https://docs.arc.cdata.com/26.4/cloud/en/getting-started/administration/settings/security.md). CORS allows browser-based clients to connect to Arc. Without CORS, browser-based scripts cannot connect to Arc because of the same-origin policy enforced by the browser. This policy restricts client-side scripts and documents from loading resources outside their origin. The origin of a script consists of the protocol, host, and port.

<table><thead><tr><th>Setting</th><th>Description</th></tr></thead>
<tbody><tr><td>**Enable cross-origin resource sharing (CORS)**</td>
<td>Whether or not CORS is enabled. The rest of these options are only available when you check this box.</td></tr>
<tr><td>**Allow all domains without '\*'**</td>
<td>If enabled, domain origins are not restricted to a specific list.</td></tr>
<tr><td>**Access-Control-Allow-Origin**</td>
<td>The comma-delimited list of domain origins to allow. Included as an HTTP response header.</td></tr>
<tr><td>**Access-Control-Allow-Credentials**</td>
<td>Whether or not user credentials such as cookies are allowed in cross-origin requests. Included as an HTTP response header.</td></tr>
<tr><td>**Access-Control-Allow-Methods**</td>
<td>The comma-delimited list of methods to allow. Included as an HTTP response header.</td></tr>
<tr><td>**Access-Control-Allow-Headers**</td>
<td>The comma-delimited list of headers to allow. Included as an HTTP response header.</td></tr>
<tr><td>**Access-Control-Max-Age**</td>
<td>The maximum duration (in seconds) that Access-Control response header values can be cached.</td></tr></tbody></table>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.