---
title: "🛡️ Get the custom CORS origins."
method: GET
path: "/api/v1/cors-origins"
tags: ["CORS Origins"]
---

# 🛡️ Get the custom CORS origins.

`GET /api/v1/cors-origins`

Get the user-configured origins that are allowed to use the API, in addition to the built-in allowlist.<br /><hr /><h3>🛡️ Requires Capabilities: <code>ServerSettings.Read</code></h3>

## Response `200`

- CorsOrigin[]
  - `corsOriginId` string, required
  - `origin` string, required
  - `addedByUserId` string
  - `id` number, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `deletedAt` string, date-time, required

## Other responses

- `401` — Possible reasons: The authorization token is invalid.
- `403` — Possible reasons: The user does not have sufficent capabilities.

## Changes

- **2026-08-09** `0a6b12031de9` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/cardinalapps/apis/cardinal-media-server-api/changes/api/v1/cors-origins/get.md)

---

[API](https://skmtc.dev/cardinalapps/apis/cardinal-media-server-api.md) · [All operations](https://skmtc.dev/cardinalapps/apis/cardinal-media-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cardinalapps/cardinal-media-server-api/revisions/7b5e4555e84f/schema)