CORS error accessing API from javascript application

These are for the admin api only. The way I understood it, is that for JavaScript clients you need to, as mentioned above, check the User API keys specification .