"API": {
    "HTTPHeaders": API_ORIGIN=*
  },
right?