Fire a request straight from your browser and watch it get blocked by CORS — then watch the same request sail through proxy.cors.sh. No key required.
Run a request to see the result.
Run a request to see the result.
Both requests run in your browser's own fetch(), so CORS is genuinely enforced — this isn't a server-side simulation.
await fetch("https://proxy.cors.sh/https://mock.cors.sh/no-cors", {
method: "GET",
headers: {
// "x-cors-api-key": "live_…", // optional — anonymous works too
},
});