diff --git a/backend/api.py b/backend/api.py
index 48b1b922..4fb4070a 100644
--- a/backend/api.py
+++ b/backend/api.py
@@ -105,15 +105,12 @@ async def log_requests_middleware(request: Request, call_next):
         raise
 
 # Define allowed origins based on environment
-allowed_origins = ["https://www.suna.so", "https://suna.so", "https://staging.suna.so", "http://localhost:3000"]
+allowed_origins = ["https://www.suna.so", "https://suna.so", "http://localhost:3000"]
 
 # Add staging-specific origins
 if config.ENV_MODE == EnvMode.STAGING:
-    allowed_origins.append("http://localhost:3000")
-    
-# Add local-specific origins
-if config.ENV_MODE == EnvMode.LOCAL:
-    allowed_origins.append("http://localhost:3000")
+    allowed_origins.append("https://suna-*-prjcts.vercel.app")
+    allowed_origins.append("https://staging.suna.so")
 
 app.add_middleware(
     CORSMiddleware,