---
title: "CORS preflight for the sandbox authority endpoint"
method: OPTIONS
path: "/api/v1/sandbox/company/{org}/authority"
tags: ["Sandbox"]
---

# CORS preflight for the sandbox authority endpoint

`OPTIONS /api/v1/sandbox/company/{org}/authority`

## Request

- Base URL: `https://www.apier.no`
- URL: `https://www.apier.no/api/v1/sandbox/company/{org}/authority`
- Auth: none required

Returns 204 with the standard sandbox CORS headers. Browser-based agents using non-simple requests trigger this preflight; simple GET requests skip it.

## Response `204`

CORS preflight response. 204 No Content with the standard sandbox CORS headers. Browsers cache the preflight via `Access-Control-Max-Age` (1 hour); the response itself is not cached by intermediaries.

---

[API](https://skmtc.dev/apier/apis/apier-no-api.md) · [All operations](https://skmtc.dev/apier/apis/apier-no-api/llms.txt) · [OpenAPI document](https://skmtc.dev/apier/apis/apier-no-api/revisions/9ec19bc87311?raw)