diff --git a/WebHostLib/api/__init__.py b/WebHostLib/api/__init__.py
index 54eb5c1de1..63914a06ba 100644
--- a/WebHostLib/api/__init__.py
+++ b/WebHostLib/api/__init__.py
@@ -2,10 +2,20 @@
 from typing import List, Tuple
 
 from flask import Blueprint
+from flask_cors import CORS
 
 from ..models import Seed, Slot
 
 api_endpoints = Blueprint('api', __name__, url_prefix="/api")
+cors = CORS(api_endpoints, resources={
+                r"/api/datapackage/*": {"origins": "*"},
+                r"/api/datapackage": {"origins": "*"},
+                r"/api/datapackage_checksum/*": {"origins": "*"},
+                r"/api/room_status/*": {"origins": "*"},
+                r"/api/tracker/*": {"origins": "*"},
+                r"/api/static_tracker/*": {"origins": "*"},
+                r"/api/slot_data_tracker/*": {"origins": "*"}
+            })
 
 
 def get_players(seed: Seed) -> List[Tuple[str, str]]:
diff --git a/WebHostLib/requirements.txt b/WebHostLib/requirements.txt
index c4267dc284..c9a923680a 100644
--- a/WebHostLib/requirements.txt
+++ b/WebHostLib/requirements.txt
@@ -6,6 +6,7 @@ waitress>=3.0.2
 Flask-Caching>=2.3.0
 Flask-Compress==1.18  # pkg_resources can't resolve the "backports.zstd" dependency of >1.18, breaking ModuleUpdate.py
 Flask-Limiter>=3.12
+Flask-Cors>=6.0.2
 bokeh>=3.6.3
 markupsafe>=3.0.2
 setproctitle>=1.3.5