diff --git a/cmd/api/main.go b/cmd/api/main.go
index 09fa1e0..3a7f25a 100644
--- a/cmd/api/main.go
+++ b/cmd/api/main.go
@@ -221,8 +221,12 @@ func setupMiddleware(app *fiber.App, sentryHandler fiber.Handler, cfg *config.Co
 	app.Use(logger.New(logger.Config{
 		Format: "[${time}] ${status} - ${latency} ${method} ${path}\n",
 	}))
+
+	// Log CORS origins for debugging
+	log.Info().Strs("cors_origins", cfg.CORSOrigins).Msg("CORS configured with origins")
+
 	app.Use(cors.New(cors.Config{
-		AllowOrigins:     strings.Join(cfg.CORSOrigins, ","),
+		AllowOrigins:     strings.Join(cfg.CORSOrigins, ", "),
 		AllowHeaders:     "Origin, Content-Type, Accept, Authorization, X-API-Key",
 		AllowMethods:     "GET, POST, PUT, DELETE, OPTIONS, PATCH",
 		AllowCredentials: true,
diff --git a/internal/config/config.go b/internal/config/config.go
index 0febe67..8af3ba7 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -69,7 +69,7 @@ func Load() (*Config, error) {
 		DatabaseURL: os.Getenv("DATABASE_URL"),
 		RedisURL:    getEnv("REDIS_URL", "localhost:6379"),
 		APIKey:      os.Getenv("BACKEND_API_KEY"),
-		CORSOrigins: parseCORSOrigins(getEnv("CORS_ORIGINS", "https://nodebyte.host")),
+		CORSOrigins: parseCORSOrigins(getEnv("CORS_ORIGINS", "http://localhost:3000,https://nodebyte.host")),
 
 		// Panel settings
 		PterodactylURL:          os.Getenv("PTERODACTYL_URL"),