CORS Proxies (Updated 2025)

cors-proxies.md

CORS Proxies (Updated 2025)

Free

Proxy (A-Z)	Methods	Status Code	Override Headers	Exposed Headers	Follow Redirect	Timeout	Size Limit	Rate Limit
allorigins	✅ All	❌ (Always 200)	❌	❌	✅	❔	❔	20/min
cloudflare-cors-anywhere	✅ All	✅ Mirror	✅	✅	❌	❔	❔	❔
codetabs	❌ (only GET)	❌ (Always 200)	❌	❌	✅	❔	625KB	5/sec
cors-anywhere (heroku)	✅ All	✅ Mirror	❔	✅	✅ (max. 5)	❔	❔	50/hour
cors.x2u.in	✅	✅ Mirror	❌	❌	✅	20s	500KB	100/hour
thebugging	❌ (only GET)	✅ Mirror	❌	❌	✅	❔	❔	10/hour

Note

• All the proxies above mirrors the response body
• Not all the proxies lists their limitations, so the info here are mix of their website information and manual testing.
• These proxies are not meant for production use, they are good for development and testing purposes.

FAQ

Why make this list?

The original list was getting outdated, so I decided to update it. I also wanted to add more information about each proxy.

Can I use these proxies in production?

Not recommended. These free proxies often have strict rate limits and may experience downtime. For production use, consider a production ready CORS proxy (see below).

Production

For production environments, you might want to consider paid services that offer more reliability and features. One option is Corsfix, which ticks all the boxes above, and offers more flexibility:

• Free development tier (60 rpm)
• Paid tiers with more throughput (120-600+ rpm)
• Unlimited monthly requests
• Headers override
• Cached responses

Good list! Here are some others that I've found across my web-searching journeys:

• Cors Everywhere: Community Edition (https://cors-anywhere.com/). Similar to Cors-everywhere Heroku, but it doesn't require you to manually request access to its APIs. Also has a faster rate limit of 20 / minute
• EveryOrigin (https://everyorigin.jwvbremen.nl/). Inspired by AllOrigin, but has more lax limits. It also doesn't have a rate limit. Haven't used it for development, but I've tried its site demo, and it seems to work fine
• Core.sh (https://cors.sh/). The strongest one here if you meet its (free) requirements. 1 million requests per month, unlimited rate limit, and 5mb request size limit are YOURS as long as it's for an open-source 5-star project hosted on GitHub. Plus, they have pretty cheap plans if you're willing to pay. 6MB max file uploads, unlimited rate limit, 500GB bandwidth, and 500,000 requests per month for $4 / month or $3 / month for an annual plan. But what about their free tier for people who don't qualify for the open-source plan? Nonexistent. The best "free" plan they give is a free trial-esque plan where you trade your email for a 3-day expiry API key. You can sign up for unlimited API keys with the same email, but you still have to manually visit the site, check your emails, and swap out your key every three days for it to work.
• CorsProxy (https://corsproxy.io/). A popular but mediocre site for general use. The free plan's specs are very generous, allowing for 10,000 requests per month, 60 requests
  per minute, 2GB bandwidth, and 1MB request limit. However, there's a catch-- they refuse any API response that isn't returned as a JSON, CSV, or XML file. If you yearn for images, you have to pay $12 / month for the privilege. Historically, some countries (like India) have also been banned from using this service. I'm not sure if they're still banned, but keep that in mind if you're trying to build something for international audiences

Cheers to this list helping someone not spend hours of their day searching the internet for COR proxies