Articles/HTTP

Access-Control-Allow-Methods Header Explained

What the HTTP Access-Control-Allow-Methods header does and when it's used.

Published October 15, 2026

The Access-Control-Allow-Methods header lists which HTTP methods are permitted for cross-origin requests.

Key points

  • Returned in response to a CORS preflight OPTIONS request
More HTTP articles