IA-QA — 152 QA & Dev Tools for AI Agents

cors_checker

Read-only

Would a browser on this origin be allowed to read this URL? Verdict allowed | blocked | unknown, the reason, and the header to add. Only GET and HEAD are really sent: other methods measure the preflight alone. Many origins at once: cors_test.

Input Schema

Name	Required	Description
`url`	Yes	Full URL to test, e.g. https://api.example.com/resource
`method`	No	Method the page uses (default: GET)
`origin`	No	Origin of the calling page (default: https://yourdomain.com)
`credentials`	No	True for fetch with credentials: "include"
`request_headers`	No	Headers the page sets, e.g. ["Authorization", "Content-Type: application/json"]. Names only are sent.

Output Schema

Name	Required	Description	Default
`fix`	No
`checks`	No
`reason`	No
`status`	No
`verdict`	No
`preflight`	No
`corsHeaders`	No
`request_sent`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed13 schema fields changedNov 5, 2026

addedInput schema / properties / credentials

Added value: +{
+  "description": "True for fetch with credentials: \"include\"",
+  "type": "boolean"
+}

changedInput schema / properties / method / description

Previous value: -"HTTP method to simulate (default: GET)"New value: +"Method the page uses (default: GET)"

changedInput schema / properties / origin / description

Previous value: -"Origin header to simulate (default: https://yourdomain.com)"New value: +"Origin of the calling page (default: https://yourdomain.com)"

addedInput schema / properties / request_headers

Added value: +{
+  "description": "Headers the page sets, e.g. [\"Authorization\", \"Content-Type: application/json\"]. Names only are sent.",
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

removedOutput schema / properties / allHeaders
```
Removed value: -{}
```
addedOutput schema / properties / checks
```
Added value: +{}
```
addedOutput schema / properties / fix
```
Added value: +{}
```
removedOutput schema / properties / method
```
Removed value: -{}
```
addedOutput schema / properties / reason
```
Added value: +{}
```
addedOutput schema / properties / request_sent
```
Added value: +{}
```
removedOutput schema / properties / testedOrigin
```
Removed value: -{}
```
removedOutput schema / properties / url
```
Removed value: -{}
```

addedOutput schema / properties / verdict

Added value: +{
+  "enum": [
+    "allowed",
+    "blocked",
+    "unknown"
+  ],
+  "type": "string"
+}

Changed1 schema field changedOct 31, 2026

addedInput schema / examples

Added value: +[
+  {
+    "url": "https://www.ia-qa.com/mcp"
+  }
+]

Changed1 schema field changedJun 21, 2026

addedOutput schema / properties

Added value: +{
+  "allHeaders": {},
+  "corsHeaders": {},
+  "method": {},
+  "preflight": {},
+  "status": {},
+  "testedOrigin": {},
+  "url": {}
+}

Changed1 schema field changedJun 10, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "type": "object"
+}

First observedMay 26, 2026

TDQS

Score is being calculated.

All IA-QA — 152 QA & Dev Tools for AI Agents tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.