diff --git a/.changeset/grumpy-adults-relate.md b/.changeset/grumpy-adults-relate.md
new file mode 100644
index 0000000000..aaee9080da
--- /dev/null
+++ b/.changeset/grumpy-adults-relate.md
@@ -0,0 +1,5 @@
+---
+"create-medusa-app": patch
+---
+
+fix(create-medusa-app): add default storefront url to auth CORS
diff --git a/packages/cli/create-medusa-app/src/utils/prepare-project.ts b/packages/cli/create-medusa-app/src/utils/prepare-project.ts
index f45dc692f4..728494e624 100644
--- a/packages/cli/create-medusa-app/src/utils/prepare-project.ts
+++ b/packages/cli/create-medusa-app/src/utils/prepare-project.ts
@@ -8,10 +8,13 @@ import ProcessManager from "./process-manager.js"
 import type { Client } from "pg"
 
 const ADMIN_EMAIL = "admin@medusa-test.com"
-const STORE_CORS = "http://localhost:8000,https://docs.medusajs.com"
-const ADMIN_CORS =
-  "http://localhost:5173,http://localhost:9000,https://docs.medusajs.com"
-const AUTH_CORS = ADMIN_CORS
+let STORE_CORS = "http://localhost:8000"
+let ADMIN_CORS =
+  "http://localhost:5173,http://localhost:9000"
+const DOCS_CORS = "https://docs.medusajs.com"
+const AUTH_CORS = [ADMIN_CORS, STORE_CORS, DOCS_CORS].join(",")
+STORE_CORS += `,${DOCS_CORS}`
+ADMIN_CORS += `,${DOCS_CORS}`
 const DEFAULT_REDIS_URL = "redis://localhost:6379"
 
 type PrepareOptions = {