diff --git a/src/main/java/likelion/MZConnent/config/SecurityConfig.java b/src/main/java/likelion/MZConnent/config/SecurityConfig.java
index f43898f..edac706 100644
--- a/src/main/java/likelion/MZConnent/config/SecurityConfig.java
+++ b/src/main/java/likelion/MZConnent/config/SecurityConfig.java
@@ -86,7 +86,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws
     @Bean
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration config = new CorsConfiguration();
-        config.setAllowedOrigins(Arrays.asList("http://mzconnect.site")); // frontend url
+        config.setAllowedOrigins(Arrays.asList("http://mzconnect.site", "http://localhost:3000")); // frontend url
         config.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS"));
         config.setAllowedHeaders(Collections.singletonList("*"));
         config.setAllowCredentials(true);