Hi How to specify list of allowed domains for enabling cora?

You want to use the

--cors-domains

server parameter: https://typesense.org/docs/0.24.0/api/server-configuration.html#using-command-line-arguments