---
title: ToolRouter — Agent Use Case Guide
description: Step-by-step guide for completing a task with a specific AI agent using ToolRouter.
url: https://toolrouter.com/tools/pentest/use-cases/test-cors-security/chatgpt
---
# How to Test CORS Security with ChatGPT

ChatGPT makes penetration test results accessible to everyone on your team by translating technical vulnerability findings into clear risk assessments with plain-language explanations. It excels at producing security reports that include executive summaries, detailed finding descriptions with business impact analysis, and prioritized remediation plans that non-security stakeholders can review and approve. Ideal for teams that need to communicate security posture to leadership.

## Setup

{"mcpServers":{"toolrouter":{"command":"npx","args":["-y","toolrouter-mcp"]}}}

## Steps

1. Configure ToolRouter in ChatGPT
2. Ask: "Test my API's CORS configuration for security issues" and provide the URL
3. ChatGPT probes CORS headers and returns findings
4. Request: "Show me the correct CORS configuration for my setup"
5. Update your CORS middleware with the secure configuration

## Example Prompt

```
Check the CORS configuration of https://api.example.com. Is it safe, or could a malicious website read data from authenticated users?
```

## Tips

- ChatGPT can generate the correct CORS middleware configuration for your framework
- Ask about the difference between reflecting origins and using an allowlist
- Request an explanation of why each CORS header matters for security
