diff --git a/src/main.ts b/src/main.ts
index 008ac1f..1f79331 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -242,7 +242,8 @@ issuerApi.get('/kcc', async (req, res) => {
     req.query.country as string,
     req.query.did as string,
   )
-  console.log('kcc request headers:', res.getHeaders()) // Log headers
+
+  res.setHeader('Access-Control-Allow-Origin', '*') // Explicitly set CORS header
   res.send(credentials)
 })