---
schema: rendered-html/v1
title: "Operations with Specific RestCorsSettings | Developer Portal for YouTrack and Hub Documentation"
source_url: https://www.jetbrains.com/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html
generated_at: 2026-06-11T15:04:40.777603+00:00
---

Feedback

Thanks for your feedback!

Was this page helpful?

YesNo

Developer Portal for YouTrack and Hub

- Developer Portal
- Apps
- MCP Tools
- YouTrack Workflows
- YouTrack Import Scripts
- YouTrack Form API
- YouTrack REST API
- Get Started with REST API
- REST API Reference
- Entities
- Resources
- Activity Items
- Issue Activities Page
- Build Bundles
- Enum Bundles
- Owned Bundles
- State Bundles
- User Bundles
- Version Bundles
- Custom Fields
- Field Types
- Backup Files
- Database Backup Settings
- Global Settings
- Operations with Specific GlobalSettings
- Sub-resources
- Appearance Settings
- License
- Locale Settings
- Notification Settings
- Rest Cors Settings
- [Operations with Specific RestCorsSettings](operations-api-admin-globalSettings-restSettings.html)
- System Settings
- Organizations
- Projects
- Telemetry data
- Global Time Tracking Settings
- Agiles
- Articles
- Assigned Roles
- Commands
- Command Suggestions
- User Groups
- Issue Link Types
- Issue Tag
- Issues
- Issue Count
- Permissions
- Roles
- Saved Queries
- Search Suggestions
- Tags
- Users
- My User Profile
- Issue Work Items
- REST API Use Cases
- REST API Troubleshooting
- Color Indices List
- Hub REST API

1. YouTrack REST API
2. REST API Reference
3. Resources
4. Global Settings
5. [Sub-resources](#0)
6. Rest Cors Settings
7. [Operations with Specific RestCorsSettings](#0)

# Operations with Specific RestCorsSettings﻿

Last modified: 24 March 2026

This resource lets you work with the Resource Sharing settings of your YouTrack service.

| Resource | ``` /api/admin/globalSettings/restSettings ``` |
| --- | --- |
| Returned entity | RestCorsSettings. For the description of the entity attributes, see [Supported Fields](/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html#RestCorsSettings-supported-fields) section. |
| Supported methods | - `GET`: [Read a Specific RestCorsSettings](/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html#get-RestCorsSettings-method). - `POST`: [Update a Specific RestCorsSettings](/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html#update-RestCorsSettings-method). |

## RestCorsSettings attributes﻿

Represents the Resource Sharing (CORS) configuration of the service.

### Related Resources﻿

Below you can find the list of resources that let you work with this entity.

- Rest CORS Settings

### Attributes﻿

This table describes attributes of the `RestCorsSettings` entity.

- To receive an attribute in the response from the server, specify it explicitly in the `fields` request parameter.
- To update an attribute, provide it in the body of a POST request.

| Field | Type | Description |
| --- | --- | --- |
| id | String | The ID of the RestCorsSettings. `Read-only`. |
| allowedOrigins | Array of Strings | Origins that are allowed for cross-origin requests. |
| allowAllOrigins | Boolean | Indicates whether requests from all origins are allowed. |

## Read a Specific RestCorsSettings﻿

Read the Resource Sharing settings of your YouTrack service.

### Request syntax﻿

```
GET /api/admin/globalSettings/restSettings?{fields}
```

| null | The database ID of RestCorsSettings |
| --- | --- |

### Request parameters﻿

| Parameter | Type | Description |
| --- | --- | --- |
| fields | String | A list of RestCorsSettings attributes that should be returned in the response. If no field is specified, only the `entityID` is returned. |

### Sample﻿

#### Sample request﻿

```
https://example.youtrack.cloud/api/admin/globalSettings/restSettings?fields=allowAllOrigins,allowedOrigins
```

#### Sample response body﻿

```
{
  "allowAllOrigins": false,
  "allowedOrigins": [],
  "$type": "RestCorsSettings"
}
```

## Update a Specific RestCorsSettings﻿

Change the Resource Sharing settings of your YouTrack service.

### Required permissions﻿

Requires permissions: Low-level Admin Write

### Request syntax﻿

```
POST /api/admin/globalSettings/restSettings?{fields}
```

| null | The database ID of RestCorsSettings |
| --- | --- |

### Request parameters﻿

| Parameter | Type | Description |
| --- | --- | --- |
| fields | String | A list of RestCorsSettings attributes that should be returned in the response. If no field is specified, only the `entityID` is returned. |

### Sample﻿

#### Sample request﻿

```
curl -L -X POST 'https://example.youtrack.cloud/api/admin/globalSettings/restSettings?fields=allowAllOrigins,allowedOrigins' \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer perm:am9obi5kb2U=.UG9zdG1hbiBKb2huIERvZQ==.jJe0eYhhkV271j1lCpfknNYOEakNk7' \
--data-raw '{
    "allowedOrigins": [
        "https://foo.example/staging:8080",
        "https://foo.example/internal:8342"
    ]
}'
```

#### Sample request body﻿

```
{
  "allowedOrigins": [
    "https://domain.example:8080",
    "https://internal.domain.example:8342"
  ]
}
```

#### Sample response body﻿

```
{
  "allowAllOrigins": false,
  "allowedOrigins": [
    "https://domain.example:8080",
    "https://internal.domain.example:8342"
  ],
  "$type": "RestCorsSettings"
}
```

- [Operations with Specific RestCorsSettings](/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html)
- [RestCorsSettings attributes](/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html#RestCorsSettings-supported-fields)
- [Read a Specific RestCorsSettings](/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html#get-RestCorsSettings-method)
- [Update a Specific RestCorsSettings](/help/youtrack/devportal/operations-api-admin-globalSettings-restSettings.html#update-RestCorsSettings-method)

Rest Cors SettingsSystem Settings

- Privacy & Security
- Terms Of Use
- Trademarks
- Legal

Copyright © 2000–2026 JetBrains s.r.o.
