---
title: "CorsPolicy"
description: "The `CorsPolicy` entity."
section: "Reference"
group: "Types"
order: 51
---

## Definition

```ts
interface CorsPolicy {
  allowOrigins: Array<string>;
  allowCredentials?: boolean | undefined;
}
```

## Fields

| Field              | Type                   | Notes                                                                                              |
| ------------------ | ---------------------- | -------------------------------------------------------------------------------------------------- |
| `allowOrigins`     | `Array<string>`        | `required` — Origins to permit (e.g. `https://app.example.com`). Pass `["*"]` to allow any origin. |
| `allowCredentials` | `boolean \| undefined` | `optional` — Whether browser cookies / credentials may flow through. Defaults to false.            |