Articles/HTTP

Access-Control-Max-Age Header Explained

What the HTTP Access-Control-Max-Age header does and when it's used.

Published October 15, 2026

The Access-Control-Max-Age header specifies how long a CORS preflight response can be cached by the browser.

Key points

  • Reduces the number of repeated OPTIONS preflight requests for the same endpoint
More HTTP articles