Pricing

from $2.10 / 1,000 endpoint auditeds

CORS Checker & Preflight Tester

Test simple and OPTIONS preflight CORS behavior with normalized policy evidence, risky-pattern findings, and truthful per-endpoint failures.

Pricing

from $2.10 / 1,000 endpoint auditeds

Rating

0.0

(0)

Developer

Michael Olmos

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Configure MCP server with CORS Checker: Preflight and Origin Policy Tester

The configuration above connects to the hosted Apify MCP server with the CORS Checker: Preflight and Origin Policy Tester Actor already loaded. It uses OAuth, so your client opens a browser window to sign you in to Apify on first use. No API token is needed. Clients without OAuth support can authenticate with an Authorization: Bearer header carrying an API token from API & Integrations in Apify Console.

Get a ready-to-use configuration for your MCP client with the CORS Checker: Preflight and Origin Policy Tester Actor preconfigured at https://mcp.apify.com/?tools=fetch-actor-details,gifted_wagon/cors-preflight-evidence-auditor.

You can connect to the Apify MCP Server using clients like Tester MCP Client, or any other MCP client of your choice.

If you want to learn more about our Apify MCP implementation, check out our MCP documentation. To learn more about the Model Context Protocol in general, refer to the official MCP documentation or read our blog post.

CORS Policy Checker - Audit Access-Control-* headers

scrappy_garden/cors-policy-checker

Check CORS response headers (Access-Control-Allow-Origin, -Credentials, -Methods, -Headers, -Expose-Headers, -Max-Age, Vary: Origin) for one or more URLs. Optionally performs a preflight OPTIONS check. Useful for debugging browser/API integrations and spotting risky CORS misconfigurations.

Bikram Adhikari

CORS Auditor

phoenix2810/cors-auditor

Audit a public URL's CORS configuration in one API call. Inspects Access-Control headers on simple and preflight requests, detects wildcard-with-credentials, reflected origins missing Vary: Origin, null-echo origins, and over-permissive methods or headers. Returns score, grade, and recommendations.

Sanskar Jaiswal

Robots.txt Tester & Validator

gifted_wagon/robots-txt-evidence-auditor

Parse robots.txt rules into normalized policy evidence, sitemap references, tested paths, and truthful failures.

Michael Olmos

CORS Security Auditor

q_services/cors-security-auditor

Detect reflected origins, credentialed wildcard CORS, null-origin trust and missing Vary headers across APIs.

Q Services

Meta Tag Extractor

gifted_wagon/website-metadata-evidence-extractor

Extract normalized page metadata with exact tag evidence, safe fetching, deterministic limits, and truthful per-URL failures.

Michael Olmos

API & Endpoint Discovery

lofomachines/api-endpoint-discovery

Discover, test, and fingerprint all API endpoints from any website. Supports bulk input, OpenAPI/Swagger parsing, GraphQL introspection, and deep auth/CORS/rate-limit detection. Use as a Claude MCP tool via Apify.

Lofomachines

Italy FatturaPA Validator - SDI Preflight for FPA12, FPR12

kamerozkan/italy-fatturapa-validator

Offline structural and deterministic content preflight for FPA12, FPR12, and FSM10 XML with pinned derived schemas and structured findings. Italian e-invoicing preflight before SDI submission: catches technical errors that commonly cause an SDI scarto, without claiming SDI acceptance.

Kamer Ozkan

Actor Input Schema Preflight — Store Test Readiness

vivid_astronaut/actor-input-schema-preflight

Detect missing or invalid prefills that can break Apify automated Store tests before publishing.

BRAINIALL Team

Store/Crawler Surface Preflight

checksmithcats/store-crawler-surface-preflight

Cross-check public robots.txt, sitemap, noindex, llms.txt, policy links, and contact signals from a storefront URL. Reads only public URLs; no account access.