# Origins

To limit specific Origins access to your application, only Origins listed in the whitelist are allowed API access, while other Origins will be rejected.

For example, adding <https://www.example.com> to the whitelist matches <[www.example.com](http://www.example.com)>, with "http\://" and "https\://" being filtered out, allowing only the hostname to be matched.

<figure><img src="https://3851559242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdWnQXn9w0LzfZSfrH31H%2Fuploads%2FJhdVwbzBojCkWMUYyuOB%2Fimage.png?alt=media&#x26;token=c4746171-8cb7-4d3b-a80a-fe64b93d6eb8" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Find out more about the HTTP Header [Origin](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin).
{% endhint %}

Kindly be informed that the settings are expected to become active in around 1 minute.
