Go back

Solution 1: Disable all browser security with a command (always works)

When you first use this tool you will likely get the following error:

{
    "message": "Failed to fetch",
    "stack": "TypeError: Failed to fetch"
}

This is because you should not be able to read these responses cross site. The browser is doing its job by not allowing this cross-origin request.

But we actually want to bypass this restriction because we want to be able to interact with any endpoint, whether it was designed for it or not.
To disable this security we'll need to start the browser with some special arguments. I found that the following works well (in Command Prompt):

chrome --disable-web-security --user-data-dir="%TEMP%\Chrome" https://graphiql-explorer-delta.vercel.app/ Copy

This command works for Chrome on Windows. You might need to replace some of these values for your own.
The --disable-web-security is to disable the CORS and other restrictions.
The --user-data-dir is to make sure we don't do these unsafe things with our actual data and cookies. This will put all data in a temporary directory to make sure it doesn't interfere with your main Chrome.
Source