Tests both API endpoints from this browser origin. Run this tool from your server (same origin as the app) and also from Claude.ai to compare CORS behaviour.