diff --git a/src/main/settings.py b/src/main/settings.py
index 0559dab..b6bbf53 100644
--- a/src/main/settings.py
+++ b/src/main/settings.py
@@ -44,6 +44,12 @@
     "https://curation-test.clinicalgenome.org",
 ]
 
+CORS_ALLOW_CREDENTIALS = True
+
+CORS_ALLOW_HEADERS = [
+    "x-api-key",
+]
+
 CSRF_TRUSTED_ORIGINS = [
     "https://affils.clinicalgenome.org",
     "https://affils-test.clinicalgenome.org",