There is a possibility that when you perform an API calls, you would receive a CORS error. You can see the example in the following .gif:
This is because of a possibility that your API calls was done from the front-end (browser), as demonstrated by the .gif above. All API call/requests done to Xendit must be done from the back-end side, requiring your account secret API key in order to perform the requests.
Hence, if you are receiving this error, please perform your API calls/requests through the back-end using your Secret API Key. If you have difficulty in integrating from back-end, we recommend you to use our libraries integration, such as PHP or Node.js.
If you need further documentation, you can visit our Xendit docs regarding API reference here