Developer portal
CORS
Browser calls from the marketing site and sandbox require explicit origins.
Default allow-list
- https://www.qtangl.com
- https://qtangl.com
- http://localhost:3000
- http://127.0.0.1:3000
- https://*.vercel.app (preview deployments)
Custom origins
Set QTANGL_CORS_ORIGINS to a comma-separated list on the backend. For regex-based previews, use QTANGL_CORS_ORIGIN_REGEX.
Server-to-server
CORS applies to browsers only. Backend integrations should call the API directly without CORS preflight concerns.
Found an issue? Report documentation feedback