diff --git a/api/conf/base.conf b/api/conf/base.conf
index 4ff8133b6..37f99d178 100644
--- a/api/conf/base.conf
+++ b/api/conf/base.conf
@@ -11,6 +11,14 @@ evolutionplugin=disabled
 
 play.filters.cors.preflightMaxAge = 3 days
 play.filters.cors.allowedHttpMethods = ["DELETE", "GET", "PATCH", "POST", "PUT", "OPTIONS"]
+play.filters.cors.allowedHttpMethods = ["DELETE", "GET", "PATCH", "POST", "PUT", "OPTIONS"]
+play.filters.cors.allowedOrigins = [
+  "https://app.apibuilder.io",
+  "https://app.apibuilder.org",
+  "http://localhost:5173"
+]
+
+
 play.http.errorHandler = "io.apicollective.play.ErrorHandler"
 play.http.filters = "io.apicollective.play.LoggingFilter"
 play.http.parser.maxMemoryBuffer=10M