diff --git a/web/api/v1/api.go b/web/api/v1/api.go
index 7ea276e37..79dec86a6 100644
--- a/web/api/v1/api.go
+++ b/web/api/v1/api.go
@@ -65,7 +65,7 @@ type API struct {
 // Enables cross-site script calls.
 func setCORS(w http.ResponseWriter) {
 	w.Header().Set("Access-Control-Allow-Headers", "Accept, Authorization, Content-Type, Origin")
-	w.Header().Set("Access-Control-Allow-Methods", "GET, POST, DELETE")
+	w.Header().Set("Access-Control-Allow-Methods", "GET")
 	w.Header().Set("Access-Control-Allow-Origin", "*")
 	w.Header().Set("Access-Control-Expose-Headers", "Date")
 }