diff --git a/ai_server/ai_server/settings.py b/ai_server/ai_server/settings.py
index 8b04ffe..33fba6e 100644
--- a/ai_server/ai_server/settings.py
+++ b/ai_server/ai_server/settings.py
@@ -127,4 +127,7 @@
 
 DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
 
-CORS_ORIGIN_ALLOW_ALL = True
\ No newline at end of file
+CORS_ALLOWED_ORIGINS = [
+    "http://localhost:4000",
+    "https://thalia.vercel.app",  
+]
\ No newline at end of file