Tools·Security

CORS tester

Send a preflight + actual request from a given Origin and see exactly which CORS headers the server returns.