HERE

HERE CORS API

Endpoints for Cross-Origin Resource Sharing (CORS)

GitHub OpenAPI

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

OPTIONS /layers/{layerId} Check CORS for generic data ingestion · CORS support for the endpoint for ingesting generic data #
Ask an LLM
“Can a browser app send generic data to an ingest layer across origins?”
“Which CORS headers does the generic data ingest endpoint return?”
Tell an agent
Run a CORS preflight on the generic data ingest endpoint for layer {layer_id}.
Check the cross-origin headers for ingesting data into layer {layer_id}.
OPTIONS /layers/{layerId}/partitions Check CORS for sending partitions to a stream · CORS support for sending a list of partitions to a stream layer #
Ask an LLM
“Is CORS enabled for posting partition lists to a stream layer?”
“Will a browser preflight succeed before I send partitions?”
Tell an agent
Run a CORS preflight for sending partitions to stream layer {layer_id}.
Check the cross-origin headers on the partitions endpoint of layer {layer_id}.
OPTIONS /layers/{layerId}/sdiiMessageList Check CORS for sending SDII messages · CORS support for sending a list of SDII messages to a stream layer #
Ask an LLM
“Can a web client send SDII message lists cross-origin?”
“What CORS headers come back for the SDII message list endpoint?”
Tell an agent
Run a CORS preflight for SDII message lists on layer {layer_id}.
Check the cross-origin headers for sending SDII messages to layer {layer_id}.
OPTIONS /problems Check CORS for synchronous tour planning · CORS support #
Ask an LLM
“Can a browser app submit tour planning problems across origins?”
“Is CORS enabled on the synchronous problems endpoint?”
Tell an agent
Run a CORS preflight on the synchronous tour planning problems endpoint.
Check the CORS headers for submitting routing problems from a browser.
OPTIONS /problems/async Check CORS for async tour planning submission · CORS support #
Ask an LLM
“Can a web app submit asynchronous tour planning problems cross-origin?”
“Does the async problems endpoint return CORS headers?”
Tell an agent
Run a CORS preflight on the async tour planning submission endpoint.
Check CORS headers for posting async routing problems.
OPTIONS /status/{statusId} Check CORS for a tour planning status check · CORS support #
Ask an LLM
“Can a browser poll tour planning status cross-origin?”
“Is CORS enabled for checking an async routing request's status?”
Tell an agent
Run a CORS preflight for status {statusId}.
Check CORS headers on the status endpoint for request {statusId}.
OPTIONS /problems/{problemId}/solution Check CORS for fetching a tour solution · CORS support #
Ask an LLM
“Can a web app download a tour planning solution cross-origin?”
“Is CORS enabled on the routing solution endpoint?”
Tell an agent
Run a CORS preflight for the solution of problem {problemId}.
Check CORS headers for getting problem {problemId}'s solution.
OPTIONS /problems/{problemId}/cancel Check CORS for cancelling a tour problem · CORS support #
Ask an LLM
“Can a browser cancel a routing problem cross-origin?”
“Does the problem cancel endpoint support CORS?”
Tell an agent
Run a CORS preflight for cancelling problem {problemId}.
Check CORS headers on the cancel endpoint of problem {problemId}.
OPTIONS /matrices Check CORS for routing matrix uploads · CORS support #
Ask an LLM
“Can a browser upload a routing matrix cross-origin?”
“Is CORS enabled on the matrices endpoint?”
Tell an agent
Run a CORS preflight on the routing matrix upload endpoint.
Check CORS headers for uploading matrices from a web app.

Documentation

📖
Documentation
https://docs.here.com/identity-and-access-management/docs
📖
APIReference
https://docs.here.com/identity-and-access-management/reference
📖
Documentation
https://docs.here.com/data-api/docs
📖
APIReference
https://docs.here.com/data-api/reference
📖
Documentation
https://docs.here.com/usage/docs
📖
APIReference
https://docs.here.com/usage/reference
📖
Documentation
https://docs.here.com/destination-weather/docs
📖
APIReference
https://docs.here.com/destination-weather/reference
📖
Documentation
https://docs.here.com/ev-products/docs
📖
APIReference
https://docs.here.com/ev-products/reference
📖
Documentation
https://docs.here.com/fuel-prices/docs
📖
APIReference
https://docs.here.com/fuel-prices/reference
📖
Documentation
https://docs.here.com/geocoding-and-search/docs
📖
APIReference
https://docs.here.com/geocoding-and-search/reference
📖
Documentation
https://docs.here.com/routing/docs
📖
APIReference
https://docs.here.com/routing/reference
📖
Documentation
https://docs.here.com/positioning/docs
📖
APIReference
https://docs.here.com/positioning/reference
📖
Documentation
https://docs.here.com/indoor-map/docs
📖
APIReference
https://docs.here.com/indoor-map/reference
📖
Documentation
https://docs.here.com/transit/docs
📖
APIReference
https://docs.here.com/transit/reference
📖
Documentation
https://docs.here.com/map-attributes/docs
📖
APIReference
https://docs.here.com/map-attributes/reference
📖
Documentation
https://docs.here.com/map-rendering/docs
📖
APIReference
https://docs.here.com/map-rendering/reference
📖
Documentation
https://docs.here.com/workspace/docs
📖
APIReference
https://docs.here.com/workspace/reference
📖
Documentation
https://docs.here.com/tour-planning/docs
📖
APIReference
https://docs.here.com/tour-planning/reference
📖
Documentation
https://docs.here.com/tracking/docs
📖
APIReference
https://docs.here.com/tracking/reference
📖
Documentation
https://docs.here.com/traffic-api/docs
📖
APIReference
https://docs.here.com/traffic-api/reference
📖
Documentation
https://docs.here.com/wego-pro/docs
📖
APIReference
https://docs.here.com/wego-pro/reference

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-cors-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/here:here-cors-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

here-cors-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Here CORS API
  x-refined-note:
  - x-olp-service differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged CORS across 2 of this provider''s published API definitions: here-data-ingest-v1-openapi.yml, here-tour-planning-v3-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://use.apilookup.for.a.base.url/
- url: https://tourplanning.hereapi.com/v3
  description: Production environment base url.
tags:
- name: CORS
  description: Endpoints for Cross-Origin Resource Sharing (CORS)
paths:
  /layers/{layerId}:
    options:
      tags:
      - CORS
      summary: CORS support for the endpoint for ingesting generic data
      description: Enable CORS by returning correct headers
      operationId: IngestAPIV1IngestDataCors
      parameters:
      - name: layerId
        in: path
        description: The ID of the layer where you want the data ingested.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Default response for CORS method
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      x-operation-id-source: normalized
      x-operation-id-original: Ingest API v1 ingestDataCors
    servers:
    - url: https://use.apilookup.for.a.base.url/
  /layers/{layerId}/partitions:
    options:
      tags:
      - CORS
      summary: CORS support for sending a list of partitions to a stream layer
      description: Enable CORS by returning correct headers
      operationId: IngestAPIV1IngestPartitionsCors
      parameters:
      - name: layerId
        in: path
        description: The ID of the layer where you want the data ingested.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Default response for CORS method
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      x-operation-id-source: normalized
      x-operation-id-original: Ingest API v1 ingestPartitionsCors
    servers:
    - url: https://use.apilookup.for.a.base.url/
  /layers/{layerId}/sdiiMessageList:
    options:
      tags:
      - CORS
      summary: CORS support for sending a list of SDII messages to a stream layer
      description: Enable CORS by returning correct headers
      operationId: IngestAPIV1IngestSDIICors
      parameters:
      - name: layerId
        in: path
        description: The ID of the layer where you want the data ingested.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Default response for CORS method
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      x-operation-id-source: normalized
      x-operation-id-original: Ingest API v1 ingestSDIICors
    servers:
    - url: https://use.apilookup.for.a.base.url/
  /problems:
    options:
      summary: CORS support
      description: Enable Cross-Origin Resource Sharing (CORS) by returning the appropriate headers.
      tags:
      - CORS
      responses:
        '200':
          description: Default response for CORS method
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      - ApiKey: []
      operationId: optionsProblems
      x-operation-id-source: derived
    servers:
    - url: https://tourplanning.hereapi.com/v3
      description: Production environment base url.
  /problems/async:
    options:
      summary: CORS support
      description: Enable CORS by returning correct headers.
      tags:
      - CORS
      responses:
        '200':
          description: Default response for the CORS method.
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      - ApiKey: []
      operationId: optionsProblemsAsync
      x-operation-id-source: derived
    servers:
    - url: https://tourplanning.hereapi.com/v3
      description: Production environment base url.
  /status/{statusId}:
    options:
      summary: CORS support
      description: Enable CORS by returning correct headers.
      tags:
      - CORS
      parameters:
      - in: path
        name: statusId
        required: true
        schema:
          $ref: '#/components/schemas/ProblemId'
      responses:
        '200':
          description: Default response for the CORS method.
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      - ApiKey: []
      operationId: optionsStatusByStatusId
      x-operation-id-source: derived
    servers:
    - url: https://tourplanning.hereapi.com/v3
      description: Production environment base url.
  /problems/{problemId}/solution:
    options:
      summary: CORS support
      description: Enable CORS by returning correct headers.
      tags:
      - CORS
      parameters:
      - in: path
        name: problemId
        required: true
        schema:
          $ref: '#/components/schemas/ProblemId'
      responses:
        '200':
          description: Default response for the CORS method.
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      - ApiKey: []
      operationId: optionsProblemsByProblemIdSolution
      x-operation-id-source: derived
    servers:
    - url: https://tourplanning.hereapi.com/v3
      description: Production environment base url.
  /problems/{problemId}/cancel:
    options:
      summary: CORS support
      description: Enable CORS by returning correct headers.
      tags:
      - CORS
      parameters:
      - in: path
        name: problemId
        required: true
        schema:
          $ref: '#/components/schemas/ProblemId'
      responses:
        '200':
          description: Default response for the CORS method.
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      - ApiKey: []
      operationId: optionsProblemsByProblemIdCancel
      x-operation-id-source: derived
    servers:
    - url: https://tourplanning.hereapi.com/v3
      description: Production environment base url.
  /matrices:
    options:
      summary: CORS support
      description: Enable CORS by returning correct headers.
      tags:
      - CORS
      responses:
        '200':
          description: Default response for the CORS method.
          headers:
            Access-Control-Allow-Headers:
              schema:
                type: string
            Access-Control-Allow-Methods:
              schema:
                type: string
            Access-Control-Allow-Origin:
              schema:
                type: string
      security:
      - Bearer: []
      - ApiKey: []
      operationId: optionsMatrices
      x-operation-id-source: derived
    servers:
    - url: https://tourplanning.hereapi.com/v3
      description: Production environment base url.
components:
  schemas:
    ProblemId:
      description: A unique identifier for the problem.
      example: 87aec2ce-b697-11e8-96f8-529269fb1459
      format: uuid
      type: string
  securitySchemes:
    Bearer:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: 'A token obtained from a separate endpoint using client credentials and an OAuth 1.0a HMAC-SHA256 signed request.


        For more information on how to get a bearer token, see the [Identity & Access Management Guide](https://www.here.com/docs/bundle/identity-and-access-management-developer-guide/page/README.html).

        '
    ApiKey:
      type: apiKey
      name: apikey
      in: query
      description: "The API authentication key. For more information on how to get an API key, \nsee [Identity and Access Management - Developer Guide](https://docs.here.com/identity-and-access-management/docs/plat-using-apikeys).\n"
x-refined-from:
- here-data-ingest-v1-openapi.yml
- here-tour-planning-v3-openapi.yml