Disable CORS entirely

tensors/server/__init__.py

@@ -49,14 +49,7 @@ def create_app() -> FastAPI:
         redoc_url=None,
     )
 
-    # CORS - allow all origins (credentials=False required for wildcard origin)
+    # CORS disabled - ComfyUI proxy handles its own requests
-    app.add_middleware(
-        CORSMiddleware,
-        allow_origins=["*"],
-        allow_credentials=False,
-        allow_methods=["*"],
-        allow_headers=["*"],
-    )
 
     # Public endpoints (no auth)
     @app.get("/status")