You should be able to run it locally.
To reply to your other question
You only need to enable CORS if the javascript you’re talking about is running on the client-side (ie. in your user’s browser). If it’s running on the server (probably using nodejs), you can just use the API 