A CORS error can appear when the given request violates Merge's security policies.
If you are running into a CORS error, please ensure that the request is coming from your backend (and not frontend). Generally, if a request requires your Merge API key, it should not come from your frontend because it would expose the API key to your users.
If this error is still occurring, please reach out to [email protected] and we would be happy to help!