PricingCompare CORS proxies

cors.dev vs CORS Anywhere

CORS Anywhere is free open-source software you host yourself, and its public demo has required a temporary-access opt-in since February 2021. cors.dev is hosted with the same URL shape and needs no key for public GET and HEAD requests.

Official pages checked 28 September 2026.

CORS Anywhere self-hosted

Free, plus your hosting

Requests: No built-in cap; rate limiting is a checkRateLimit option you configure
Hosting: Your own Node.js process; uptime and abuse handling are yours
Methods & headers: No restrictions except cookies; user credentials are refused
URL format: Target URL appended to the proxy path; protocol optional, defaults to http
Public demo: cors-anywhere.herokuapp.com answers 403 until you opt in at /corsdemo; development only
License: MIT

View CORS Anywhere README

cors.dev Pro

$5 / month

Plus tax where applicable.

Requests: 500,000 per monthly billing period
Throughput: 600 requests per minute and 10 concurrent requests per account; shared service limits also apply
Targets: Public HTTPS hostnames on port 443
Size & time: 1 MiB request body, 6 MiB response, 10 seconds
Methods: GET, HEAD, POST, PUT, PATCH and DELETE
Headers: Custom headers and explicit Authorization; no browser cookies or secret vault
Caching: Opt-in GET caching, 1 to 300 seconds. Eligible public responses only; cache hits count.

Check managed availability in your account. Free access is available now.

Create account

Replace the CORS Anywhere prefix

Both proxies put the full target URL after the proxy origin, so the change is the prefix. Your existing https://cors-anywhere.herokuapp.com/ or your own http://localhost:8080/ becomes https://proxy.cors.dev/. Unlike CORS Anywhere, cors.dev only reaches public HTTPS hosts rather than plain http targets or hosts inside your own network. Anonymous use covers GET and HEAD requests, while other HTTP methods require managed access.

CORS Anywhere to cors.dev

// Before: the public demo, after opting in at /corsdemo
const demo = await fetch('https://cors-anywhere.herokuapp.com/https://api.example.com/path');

// Before: your own instance
const own = await fetch('http://localhost:8080/https://api.example.com/path');

// After: cors.dev, same shape, nothing to run
const after = await fetch('https://proxy.cors.dev/https://api.example.com/path');
const data = await after.json();

Choose for the requests you actually send.

Self-hosted CORS Anywhere gives you full control in code, covering origin whitelists, header rewriting, and rate limits. It has no per-request pricing, imposes no method restrictions, and reaches plain http targets and hosts inside your own network. In exchange, you run, pay for, and secure a Node.js server yourself, while the public demo is opt-in, rate limited, and for development only. With cors.dev, you have nothing to run. It offers 600 requests per minute per IP anonymously with no monthly quota, and Pro at $5 per month for 500,000 requests with write methods and Authorization headers.

When to stay with CORS Anywhere

Stay with your own CORS Anywhere instance if you reach targets on plain http or inside a private network. Keep it if you need custom header rewriting with setHeaders and removeHeaders, an origin whitelist enforced by your own server, or responses larger than 6 MiB. It is also practical when traffic is far above 500,000 requests per month and your own server is cheaper. The public demo is not a production option.

Try cors.dev with your own public HTTPS API if its request model fits your app. The managed trial includes 1,000 requests total over 7 days, without a card. For public GET and HEAD APIs, anonymous use needs no account.

Neither a request count nor a price establishes which service is faster or more reliable. Check your payloads, credentials and traffic pattern against the provider's current documentation.

Read the cors.dev request contract Test your API's CORS response