WorkOS

WorkOS user-management.cors-origins API

Manage CORS origins for user management.

Documentation GitHub OpenAPI

Operations 1

POST /user_management/cors_origins Create a CORS Origin #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/workos-user-management-cors-origins-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: WorkOS admin-portal User Management.cors Origins API
  description: WorkOS REST API
  version: '1.0'
  contact:
    name: WorkOS
    url: https://workos.com
    email: support@workos.com
  license:
    name: MIT
    url: https://opensource.org/license/MIT
servers:
- url: https://api.workos.com
  description: Production
- url: https://api.workos-test.com
  description: Staging
security:
- bearer: []
tags:
- name: user-management.cors-origins
  description: Manage CORS origins for user management.
  x-displayName: CORS Origins
paths:
  /user_management/cors_origins:
    post:
      description: Creates a new CORS origin for the current environment. CORS origins allow browser-based applications to make requests to the WorkOS API.
      operationId: CorsOriginsController_createCorsOrigin
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateCorsOriginDto'
      responses:
        '201':
          description: CORS origin created successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CorsOriginResponse'
        '409':
          description: Duplicate CORS origin.
          content:
            application/json:
              schema:
                type: object
                properties:
                  code:
                    type: string
                    description: The error code.
                    example: duplicate_cors_origin
                  message:
                    type: string
                    description: A human-readable error message.
                    example: CORS origin already exists.
        '422':
          description: Validation error.
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                    description: A human-readable error message.
                    example: Validation failed.
                  errors:
                    type: array
                    description: The list of validation errors.
                    items:
                      type: object
                      properties:
                        property:
                          type: string
                          description: The property that failed validation.
                          example: origin
                        constraints:
                          type: object
      summary: Create a CORS Origin
      tags:
      - user-management.cors-origins
components:
  schemas:
    CreateCorsOriginDto:
      type: object
      properties:
        origin:
          type: string
          description: The origin URL to allow for CORS requests.
          example: https://example.com
      required:
      - origin
    CorsOriginResponse:
      type: object
      properties:
        object:
          type: string
          description: Distinguishes the CORS origin object.
          const: cors_origin
        id:
          type: string
          description: Unique identifier of the CORS origin.
          example: cors_origin_01HXYZ123456789ABCDEFGHIJ
        origin:
          type: string
          description: The origin URL.
          example: https://example.com
        created_at:
          type: string
          format: date-time
          description: Timestamp when the CORS origin was created.
          example: '2026-01-15T12:00:00.000Z'
        updated_at:
          type: string
          format: date-time
          description: Timestamp when the CORS origin was last updated.
          example: '2026-01-15T12:00:00.000Z'
      required:
      - object
      - id
      - origin
      - created_at
      - updated_at
  securitySchemes:
    bearer:
      scheme: bearer
      bearerFormat: JWT
      type: http
      description: 'Your WorkOS API key prefixed with `sk_`. Pass it as a Bearer token: `Authorization: Bearer sk_example_123456789`.'
    access_token:
      scheme: bearer
      bearerFormat: JWT
      type: http
      description: An SSO access token returned from the Get a Profile and Token endpoint.

WorkOS user-management.cors-origins API

Operations 1

Documentation

Specifications

SDKs

Other Resources