Just tried it from a front end site, CORS was a no-go