diff --git a/Backend/API_DOCS.md b/Backend/API_DOCS.md
index e970f93..e910e02 100644
--- a/Backend/API_DOCS.md
+++ b/Backend/API_DOCS.md
@@ -1,6 +1,6 @@
 # Authentication API Documentation
 
-Base URL: `http://localhost:8000` (dev) | `https://your-backend.vercel.app` (prod)
+Base URL: `http://localhost:8000` (dev) | `https://toc-simulator-backend.onrender.com` (prod)
 
 ## Endpoints
 
diff --git a/Backend/config/settings.py b/Backend/config/settings.py
index 63da4d2..d0f9a3b 100644
--- a/Backend/config/settings.py
+++ b/Backend/config/settings.py
@@ -30,8 +30,8 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = os.getenv('DEBUG', 'True') == 'True'
 
-# Allow all hosts for development/testing
-ALLOWED_HOSTS = ['*']
+# Allowed hosts: localhost for dev, Render for production
+ALLOWED_HOSTS = ['localhost', '127.0.0.1', 'toc-simulator-backend.onrender.com']
 
 
 # Application definition