diff --git a/pyproject.toml b/pyproject.toml
index c064492a..580869bc 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -13,6 +13,7 @@ dependencies = [
     "phonenumbers==8.13.*",
     "requests==2.31.*",
     "geopy==2.4.*",
+    "django-cors-headers==4.3.*",
 ]
 
 [project.optional-dependencies]
diff --git a/src/meshdb/settings.py b/src/meshdb/settings.py
index 47da18eb..599c2306 100644
--- a/src/meshdb/settings.py
+++ b/src/meshdb/settings.py
@@ -41,6 +41,11 @@
     "nginx",
 ]
 
+CORS_ALLOWED_ORIGINS = [
+    "http://127.0.0.1:3000",
+    "http://localhost:3000",
+]
+
 CSRF_TRUSTED_ORIGINS = [
     "https://meshdb.mesh",
     "https://meshdb.mesh.nycmesh.net",
@@ -61,10 +66,12 @@
     "rest_framework",
     "rest_framework.authtoken",
     "meshapi",
+    "corsheaders",
 ]
 
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",
+    "corsheaders.middleware.CorsMiddleware",
     "django.contrib.sessions.middleware.SessionMiddleware",
     "django.middleware.common.CommonMiddleware",
     "django.middleware.csrf.CsrfViewMiddleware",