diff --git a/runtime/agent_server.py b/runtime/agent_server.py
index 3f7d6298..1219d860 100644
--- a/runtime/agent_server.py
+++ b/runtime/agent_server.py
@@ -171,6 +171,7 @@ def __getattr__(self, name):
     allow_origins=_cors_origins,
     allow_methods=["POST", "GET"],
     allow_headers=["Content-Type", "Authorization", "X-Request-Id"],
+    allow_credentials=False,
 )