diff --git a/http/Cargo.toml b/http/Cargo.toml
index b968e1e..685d832 100644
--- a/http/Cargo.toml
+++ b/http/Cargo.toml
@@ -30,7 +30,7 @@ eyre.workspace = true
 
 axum = { optional = true, version = "0.8.4", default-features = false, features = ["http2", "ws", "macros"] }
 http-body-util = { version = "0.1.3", optional = true }
-tower-http = { optional = true, version = "0.6.6", default-features = false, features = ["limit"] }
+tower-http = { optional = true, version = "0.6.6", default-features = false, features = ["cors"] }
 serde_urlencoded = { version = "0.7.1", optional = true }
 
 tokio = { workspace = true, optional = true }
diff --git a/http/src/server/mod.rs b/http/src/server/mod.rs
index fcfa416..c7532b7 100644
--- a/http/src/server/mod.rs
+++ b/http/src/server/mod.rs
@@ -58,10 +58,13 @@ pub async fn serve(
 }
 
 pub fn make_router<T: Types>(service: T::Service) -> axum::Router {
+    use tower_http::cors;
+
     let scope = handler::RouterScope::root(State::<T> { service });
     routes::make(scope)
         .into_axum()
         .layer(fastrace_axum::FastraceLayer)
+        .layer(cors::CorsLayer::permissive())
 }
 
 #[perfect_derive(Clone)]