diff --git a/server.js b/server.js
index 0837a03..34b24af 100644
--- a/server.js
+++ b/server.js
@@ -5,6 +5,7 @@ var uglify = require('uglify-js');
 var winston = require('winston');
 var connect = require('connect');
 var route = require('connect-route');
+var cors = require('connect-cors');
 var connect_st = require('st');
 var connect_rate_limit = require('connect-ratelimit');
 
@@ -107,6 +108,12 @@ if (config.rateLimits) {
   app.use(connect_rate_limit(config.rateLimits));
 }
 
+// Allow CORS from everywhere
+app.use(function (req, res, next) {
+  res.setHeader('Access-Control-Allow-Origin', '*');
+  next();
+});
+
 // first look at API calls
 app.use(route(function(router) {
   // get raw documents - support getting with extension