diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts
index ff8cae5..4218a2b 100644
--- a/apps/api/src/server.ts
+++ b/apps/api/src/server.ts
@@ -38,9 +38,15 @@ app.use((_req, res, next) => {
   res.setHeader('Referrer-Policy', 'strict-origin-when-cross-origin')
   next()
 })
+const desktopOrigins = new Set([
+  'tauri://localhost',
+  'http://tauri.localhost',
+  'https://tauri.localhost',
+])
+
 app.use(cors({
   origin(origin, callback) {
-    if (!origin || origin === config.webOrigin) callback(null, true)
+    if (!origin || origin === config.webOrigin || desktopOrigins.has(origin)) callback(null, true)
     else callback(new Error('cors_origin_rejected'))
   },
   credentials: false,