---
title: CORS Whitelist
description: "Note: This feature pertains only to Admin API running from a browser. If you need a CORS update in support of your Engine API traffic, please work with your account team to request this header in your"
---
[Skip to content](https://doc.sitespect.com/knowledge/cors-whitelist#main-content)
English
Show submenu for translations
- [A/B Testing](https://www.sitespect.com/testing-and-experimentation/)
- [Personalization](https://www.sitespect.com/personalization-targeting/)
- [Recommendations](https://www.sitespect.com/recommendations/)
Open main navigation
Close main navigation
- [A/B Testing](https://www.sitespect.com/testing-and-experimentation/)
- [Personalization](https://www.sitespect.com/personalization-targeting/)
- [Recommendations](https://www.sitespect.com/recommendations/)
- English
Show submenu for translations
How can we help you?
- There are no suggestions because the search field is empty.
1. [Knowledge Base](https://doc.sitespect.com/knowledge?hsLang=en)
2. [Implementation, Deployment, and Security](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en)
# CORS Whitelist
Note: This feature pertains only to Admin API running from a browser. If you need a CORS update in support of your Engine API traffic, please work with your account team to request this header in your domain settings.
Normally, browsers block client-side requests across different origins. To help you work around this restriction, SiteSpect has a Cross-Origin Resource Sharing (CORS) Whitelist, which adds specific headers to the SiteSpect server response that allow such cross-domain communication. Add your domain to the CORS Whitelist to prevent requests from being blocked. For example, if your application is located at [mysite.com](http://mysite.com/), add [mysite.com](http://mysite.com/) to the CORS Whitelist. Click [here](https://en.wikipedia.org/wiki/Cross-origin_resource_sharing) for more information on CORS.
**Note:** You must have admin access to use this feature.
To set up a CORS Whitelist in SiteSpect:
1. Select **System**, **Security**, then **CORS Whitelist** from the left nav.
1. On the CORS Whitelist tab, enter a domain and click the **plus sign** (**+**) to add it to the approved list.
SiteSpect adds the domain to the list.
To delete a domain from the list, click the **minus sign** (**-**) in the **Actions** column.
- [Get Started](https://doc.sitespect.com/knowledge/get-started?hsLang=en#main-content)
- [SiteSpect Support](https://doc.sitespect.com/knowledge/get-started?hsLang=en#sitespect-support)
- [Overview Information](https://doc.sitespect.com/knowledge/get-started?hsLang=en#overview-information)
- [Intro to SiteSpect](https://doc.sitespect.com/knowledge/get-started?hsLang=en#intro-to-sitespect)
- [Account Setup](https://doc.sitespect.com/knowledge/get-started?hsLang=en#account-setup)
- [Artificial Intelligence](https://doc.sitespect.com/knowledge/get-started?hsLang=en#artificial-intelligence)
- [Dashboard](https://doc.sitespect.com/knowledge/dashboard?hsLang=en)
- [Build](https://doc.sitespect.com/knowledge/build?hsLang=en#main-content)
- [Setting Up a Campaign](https://doc.sitespect.com/knowledge/build?hsLang=en#setting-up-a-campaign)
- [Create a Client-Side Campaign](https://doc.sitespect.com/knowledge/build?hsLang=en#create-a-client-side-campaign)
- [Create a Server-Side Campaign](https://doc.sitespect.com/knowledge/build?hsLang=en#create-a-server-side-campaign)
- [Metrics](https://doc.sitespect.com/knowledge/build?hsLang=en#metrics)
- [Audiences](https://doc.sitespect.com/knowledge/build?hsLang=en#audiences)
- [Triggers](https://doc.sitespect.com/knowledge/build?hsLang=en#triggers)
- [Variations](https://doc.sitespect.com/knowledge/build?hsLang=en#variations)
- [Traffic Management](https://doc.sitespect.com/knowledge/build?hsLang=en#traffic-management)
- [Preview](https://doc.sitespect.com/knowledge/build?hsLang=en#preview)
- [Factors](https://doc.sitespect.com/knowledge/build?hsLang=en#factors)
- [Advanced Settings](https://doc.sitespect.com/knowledge/build?hsLang=en#advanced-settings)
- [Omnichannel](https://doc.sitespect.com/knowledge/build?hsLang=en#omnichannel)
- [Regular Expressions (Regex)](https://doc.sitespect.com/knowledge/build?hsLang=en#regular-expressions-regex)
- [WATTS](https://doc.sitespect.com/knowledge/build?hsLang=en#watts)
- [Recommendations](https://doc.sitespect.com/knowledge/build?hsLang=en#recommendations)
- [Monitor](https://doc.sitespect.com/knowledge/monitor?hsLang=en)
- [Analyze](https://doc.sitespect.com/knowledge/analyze?hsLang=en#main-content)
- [Data Export and Integration](https://doc.sitespect.com/knowledge/analyze?hsLang=en#data-export-and-integration)
- [SiteSpect Reports](https://doc.sitespect.com/knowledge/analyze?hsLang=en#sitespect-reports)
- [Site](https://doc.sitespect.com/knowledge/site?hsLang=en#main-content)
- [Tools](https://doc.sitespect.com/knowledge/site?hsLang=en#tools)
- [Configuration](https://doc.sitespect.com/knowledge/site?hsLang=en#configuration)
- [Developers](https://doc.sitespect.com/knowledge/developers?hsLang=en#main-content)
- [API Reference](https://doc.sitespect.com/knowledge/developers?hsLang=en#api-reference)
- [Code Samples](https://doc.sitespect.com/knowledge/developers?hsLang=en#code-samples)
- [Tips & Tricks](https://doc.sitespect.com/knowledge/developers?hsLang=en#tips-tricks)
- [Mobile](https://doc.sitespect.com/knowledge/mobile?hsLang=en)
- [Implementation, Deployment, and Security](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#main-content)
- [How does SiteSpect work with CDNs?](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#how-does-sitespect-work-with-cdns)
- [Single Tenant Implementations](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#single-tenant-implementations)
- [Security Features](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#security-features)
- [Deployment and Implementation Overview](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#deployment-and-implementation-overview)
- [SiteSpect Engine & Admin API](https://doc.sitespect.com/knowledge/implementation-deployment-and-security?hsLang=en#sitespect-engine-admin-api)
- [Third-Party Integration](https://doc.sitespect.com/knowledge/third-party-integration?hsLang=en#main-content)
- [Google](https://doc.sitespect.com/knowledge/third-party-integration?hsLang=en#google)
- [Zuko](https://doc.sitespect.com/knowledge/third-party-integration?hsLang=en#zuko)
- [Troubleshooting](https://doc.sitespect.com/knowledge/troubleshooting?hsLang=en)
- [Releases](https://doc.sitespect.com/knowledge/releases?hsLang=en#main-content)
- [Superfresh](https://doc.sitespect.com/knowledge/releases?hsLang=en#superfresh)
- [Feedback](https://doc.sitespect.com/knowledge/feedback?hsLang=en)
- [A/B Testing](https://www.sitespect.com/testing-and-experimentation/)
- [Personalization](https://www.sitespect.com/personalization-targeting/)
- [Recommendations](https://www.sitespect.com/recommendations/)
[](http://monetate.com)
[mailto:email@email.com](mailto:email@email.com)
Copyright © 2026, Monetate