# 403 Forbidden CORS error **URL:** \ **Category:** API Issues\ **Created:** [August 21, 2024, 8:56am UTC](http://forum.companieshouse.gov.uk/t/403-forbidden-cors-error/8354 "2024-08-21T08:56:35Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![george.morriss](http://forum.companieshouse.gov.uk/letter_avatar_proxy/v4/letter/g/ce7236/32.png) [@george.morriss](http://forum.companieshouse.gov.uk/u/george.morriss)\ **Post date:** [August 21, 2024, 8:56am UTC](http://forum.companieshouse.gov.uk/t/403-forbidden-cors-error/8354/1 "2024-08-21T08:56:35Z")
403 Forbidden CORS error since 31st July when calling [https://api.company-information.service.gov.uk/company/companynumber](https://api.company-information.service.gov.uk/company/companynumber) Tested through postman and we get a valid response, but when calling from our website via Ajax we Example of error- Access to XMLHttpRequest at ‘[https://api.company-information.service.gov.uk/company/07161812](https://api.company-information.service.gov.uk/company/07161812)’ from origin ‘[(Requesting Domain)](https://esavings.shawbrook.co.uk/)’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.