Admin page error

1. The problem I’m having:

When I browse to the admin page I get an error. I’m on the server machine. The way I read the log, there should be no issue accessing the admin endpoint:
2026/06/13 17:45:17.731 ← [34mINFO<-[0m admin admin endpoint started {“address”: “localhost:2019”, “enforce_origin”: false, “origins”: [“//[::1]:2019”, “``//127.0.0.1:2019``”, “``//localhost:2019``”]}

2. Error messages and/or full log output:

{"error":"client is not allowed to access from origin ''"}

2026/06/13 21:59:52.936 ←[31mERROR←[0m  admin.api       request error   {"error": "client attempted to make request by disabling same-origin policy using no-cors mode", "status_code": 400}

3. Caddy version:

2.11.4 AMD x64

4. How I installed and ran Caddy:

caddy run

a. System environment:

Windows 10 x64

b. Command:

http://localhost:2019/admin
or /config
or /debug

c. Service/unit/compose file:

PASTE OVER THIS HERE IN THIS CODE BLOCK.
Please ensure it looks nice.

d. My complete Caddy config:

sub.anythingyoulike.com:8443 {
	reverse_proxy :81
}

5. Links to relevant resources:

Type here

You’re not saying how you’re browsing the admin page but your client needs to set the origin http request header.

The error says why the request was rejected:

client attempted to make request by disabling same-origin policy using no-cors mode

So, make sure the client is not doing this :slight_smile:

I’m using my web browser, Edge on W10. How do I change how the browser is browsing to the page?

Man, I don’t understand this. It used to work. I’ve never had trouble using localhost before for anything.

I tried "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --user-data-dir=C:\msedge-dev-data\ --disable-web-security but still fails.

So what is Caddy doing by this?: “enforce_origin”: false

What is the request being made by Edge? Use the devtools to get a readout of what it’s actually doing.

It’s not specific to Edge, to be sure. Firefox does the same. Does this show the request info you are thinking of?

Fx Edge

If this is general browser behavior, then how does anyone see Caddy’s admin or config pages?

Let’s take a step back. What are you exactly trying to do?

Just trying to see the /admin or /config page after starting Caddy.

It’s an API endpoint, not a page browsable on the browser.

Sorry about that. I had a bookmark in my browser from a long time ago. I don’t remember what I saw back then, but it must have shown something useful.

Thanks.