diff --git a/src/main/java/com/moddy/server/config/WebConfig.java b/src/main/java/com/moddy/server/config/WebConfig.java
index 803b0f01..f89d219c 100644
--- a/src/main/java/com/moddy/server/config/WebConfig.java
+++ b/src/main/java/com/moddy/server/config/WebConfig.java
@@ -20,7 +20,7 @@ public class WebConfig implements WebMvcConfigurer {
     @Override
     public void addCorsMappings(final CorsRegistry registry) {
         registry.addMapping("/**")
-                .allowedOriginPatterns("*")
+                .allowedOriginPatterns("http://localhost:5173", "http://localhost:8080", "https://www.moddy.kr", "https://api.moddy.kr", "https://dev.moddy.kr")
                 .allowedMethods(HttpMethod.GET.name(), HttpMethod.POST.name(), HttpMethod.PUT.name(), HttpMethod.DELETE.name(), HttpMethod.OPTIONS.name())
                 .allowedHeaders("Authorization", "Content-Type")
                 .allowCredentials(true)