diff --git a/public/docs/.htaccess b/public/docs/.htaccess
index 5cd648273..3f0414a6f 100644
--- a/public/docs/.htaccess
+++ b/public/docs/.htaccess
@@ -1 +1,6 @@
+SetEnvIf Origin "^(https://docs.thetool.xinon.at|https://editor.swagger.io|.*abstellgleis.at)$" AccessControlAllowOrigin=$0
+Header add Access-Control-Allow-Origin %{AccessControlAllowOrigin}e env=AccessControlAllowOrigin
+Header add Access-Control-Allow-Methods: "GET,POST,OPTIONS"
+Header add Access-Control-Allow-Headers: "X-Api-Key"
+
 Header add Cach-control: "no-store, no-cache, must-revalidate"