Data & Text
CORS Preflight Inspector
Paste a target API URL, browser origin, request method, request headers, and response headers to review a CORS preflight locally. Flags missing Access-Control-Allow-Origin, method/header mismatches, credential risks, missing Vary: Origin, max-age choices, and Private Network Access headers, then exports a curl OPTIONS probe, framework snippets, and a safe CI verification pack with placeholders. Nothing is uploaded.
Runs in your browser
Nothing uploaded
Free, no signup
Ctrl + Enter to run · Recent brings back your last inputs · Everything stays in this browser
FAQ
CORS Preflight Inspector: questions
What should I paste into CORS Preflight Inspector?
Paste the API URL, the web app origin, the method and headers your browser request will use, and the response headers from an OPTIONS request or failed browser request.
Does this send a request to my API?
No. It analyzes the text you paste and builds a curl preflight command plus a Node verification pack you can run from your own machine or CI.
What CORS problems does it flag?
It checks origin allow rules, credential compatibility, allowed methods, allowed headers, Vary: Origin, preflight cache lifetime, and Private Network Access headers.
What is in the verification pack?
The pack includes .env.example placeholders, cors-assertions.json, and a starter verify-cors-preflight.mjs file that probes OPTIONS headers and asserts the expected browser-facing policy.
Can it fix my framework automatically?
No. It provides reviewed Express and PHP examples that you should adapt to your real routes, auth model, and allowed origins.
JSON Formatter & Validator
Pretty-print & validate JSON
Image Resize Calculator
Calculate new dimensions while preserving aspect ratio
Password Strength Checker
Analyze password entropy and weaknesses
YAML ↔ JSON Converter
Convert between YAML and JSON
JSON to YAML
Convert JSON to YAML format
JSON Schema Generator
Infer and validate API contracts
Made something with AI? Share it as a private link.
Drop in the HTML from Claude, ChatGPT or any editor and get a link your client can open anywhere — with a password, view tracking, comments and approval.