diff --git a/lib/chat/__tests__/handleChatStream.test.ts b/lib/chat/__tests__/handleChatStream.test.ts
index 5943fee..b29127d 100644
--- a/lib/chat/__tests__/handleChatStream.test.ts
+++ b/lib/chat/__tests__/handleChatStream.test.ts
@@ -162,6 +162,11 @@ describe("handleChatStream", () => {
       expect(mockCreateUIMessageStream).toHaveBeenCalled();
       expect(mockCreateUIMessageStreamResponse).toHaveBeenCalledWith({
         stream: mockStream,
+        headers: {
+          "Access-Control-Allow-Origin": "*",
+          "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS, PATCH",
+          "Access-Control-Allow-Headers": "Content-Type, Authorization, X-Requested-With, x-api-key",
+        },
       });
       expect(result).toBe(mockResponse);
     });
diff --git a/lib/chat/handleChatStream.ts b/lib/chat/handleChatStream.ts
index 56cfb96..fe97137 100644
--- a/lib/chat/handleChatStream.ts
+++ b/lib/chat/handleChatStream.ts
@@ -58,7 +58,7 @@ export async function handleChatStream(request: NextRequest): Promise<Response>
       },
     });
 
-    return createUIMessageStreamResponse({ stream });
+    return createUIMessageStreamResponse({ stream, headers: getCorsHeaders() });
   } catch (e) {
     console.error("/api/chat Global error:", e);
     return NextResponse.json(
diff --git a/lib/networking/getCorsHeaders.ts b/lib/networking/getCorsHeaders.ts
index 0a6c3a0..233b32d 100644
--- a/lib/networking/getCorsHeaders.ts
+++ b/lib/networking/getCorsHeaders.ts
@@ -7,6 +7,6 @@ export function getCorsHeaders(): Record<string, string> {
   return {
     "Access-Control-Allow-Origin": "*",
     "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS, PATCH",
-    "Access-Control-Allow-Headers": "Content-Type, Authorization, X-Requested-With",
+    "Access-Control-Allow-Headers": "Content-Type, Authorization, X-Requested-With, x-api-key",
   };
 }