diff --git a/red/api/index.js b/red/api/index.js
index a84751573..2d0516d39 100644
--- a/red/api/index.js
+++ b/red/api/index.js
@@ -20,6 +20,7 @@ var util = require('util');
 var path = require('path');
 var passport = require('passport');
 var when = require('when');
+var cors = require('cors');
 
 var ui = require("./ui");
 var nodes = require("./nodes");
@@ -112,6 +113,10 @@ function init(_server,_runtime) {
             );
             adminApp.post("/auth/revoke",needsPermission(""),auth.revoke,errorHandler);
         }
+        if (settings.httpAdminCors) {
+            var corsHandler = cors(settings.httpAdminCors);
+            adminApp.use(corsHandler);
+        }
 
         // Flows
         adminApp.get("/flows",needsPermission("flows.read"),flows.get,errorHandler);