# Third-party API blocked by CORS policy

**URL:** <https://devforum.zoom.us/t/third-party-api-blocked-by-cors-policy/83112>\
**Category:** Meetings\
**Created:** [February 14, 2023, 1:08pm UTC](https://devforum.zoom.us/t/third-party-api-blocked-by-cors-policy/83112 "2023-02-14T13:08:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vikas](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/vikas/32/45476_2.png) [@vikas](https://devforum.zoom.us/u/vikas)\
**Post date:** [February 14, 2023, 1:08pm UTC](https://devforum.zoom.us/t/third-party-api-blocked-by-cors-policy/83112/1 "2023-02-14T13:08:48Z")

</div>

We are working on integration of zoom app using the sample app provided in forum (zoomapps-advancedsample-react)  
However, as we try to make a external API call from the app, we are getting this error -

“Access to XMLHttpRequest at ‘[https://api.publicapis.org/entries](https://api.publicapis.org/entries)’ from origin ‘[3d85-2402-3a80-18c2-a92e-cddd-e545-f1f4-b7da.in.ngrok.io](http://3d85-2402-3a80-18c2-a92e-cddd-e545-f1f4-b7da.in.ngrok.io)’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.”

Can you please help us to find the root cause here

---

<div class="post-metadata">

**Author:** ![vikas](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/vikas/32/45476_2.png) [@vikas](https://devforum.zoom.us/u/vikas)\
**Post date:** [February 15, 2023, 6:37am UTC](https://devforum.zoom.us/t/third-party-api-blocked-by-cors-policy/83112/2 "2023-02-15T06:37:43Z")

</div>

We find a solution  
we add a base URL in to App’s Allow List Domains now its working