Getting CORS error—what are the correct CORS settings?

Also, I found this thread in the forums about batching large numbers of requests and setting up a REST API using additional scope to give the request an origin to avoid CORS errors.

You can definitely set up either a JS Query loop block in an app or in a workflow.

Let me know if this works for your use case!