# `AgentDbWeb.CORSPlug`
[🔗](https://github.com/manhvu/agent_db/blob/v0.1.0/lib/agent_db_web/cors_plug.ex#L1)

CORS for the API.

The surface is an agent's own context store, bound to loopback and read by
local tooling, so the browsers that reach it are local too. The allowed
origins are therefore configuration rather than a compiled-in list: a
deployment that fronts this with a real gateway names its origins, and one
that does not allows none.

---

*Consult [api-reference.md](api-reference.md) for complete listing*