Cross-original resource sharing


External Access

By default Cachet can be accessed by any third-party server.

You may configure your Cachet installation for CORS very easily. To blacklist everybody except one or more domains:

  1. Login to your Dashboard
  2. Go to the Settings panel
  3. Click on Security
  4. You'll see a Allowed domains textarea, fill in any domains that you want to access the API as a comma separated list:,