---
title: "Replace the stored domains allowed for CORS access"
method: PUT
path: "/gdc/domains/{domain_name}/securitySettings/allowedOrigins"
tags: ["allowed-origins"]
---

# Replace the stored domains allowed for CORS access

`PUT /gdc/domains/{domain_name}/securitySettings/allowedOrigins`

## Request

- Base URL: `https://secure.gooddata.com`
- URL: `https://secure.gooddata.com/gdc/domains/{domain_name}/securitySettings/allowedOrigins`
- Auth: none declared

You can replace the currently stored domains allowed for CORS access with a different set of allowed domains.
All the allowed domains that are defined for your domain are deleted, and the submitted domains are added

Submitting a request with an empty `items` array deletes all the the currently stored domains allowed for CORS access.

## Path parameters

- `domain_name` string, required

## Request body

- AllowedOrigins
  - `allowedOrigins` object, required
    - `items` string[], required

## Response `204`

_

## Other responses

- `400`: The API call failed due to a validation error. The provided data is incomplete or incorrect (for example, the number of allowed origins in the domain has reached the limit, and so on). Check the input data, and then re-issue the call.

---

[API](https://skmtc.dev/gooddata/apis/gooddata-api-documentation.md) - [All operations](https://skmtc.dev/gooddata/apis/gooddata-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/gooddata/apis/gooddata-api-documentation/revisions/e5dc0ee6ab00?raw)