diff --git a/cmd/cli/handler_client.go b/cmd/cli/handler_client.go
index f36c6d88eab..484138fed20 100644
--- a/cmd/cli/handler_client.go
+++ b/cmd/cli/handler_client.go
@@ -106,6 +106,7 @@ func (h *ClientHandler) CreateClient(cmd *cobra.Command, args []string) {
 		PolicyUri:               flagx.MustGetString(cmd, "policy-uri"),
 		LogoUri:                 flagx.MustGetString(cmd, "logo-uri"),
 		ClientUri:               flagx.MustGetString(cmd, "client-uri"),
+		AllowedCorsOrigins:      flagx.MustGetStringSlice(cmd, "allowed-cors-origins"),
 		SubjectType:             flagx.MustGetString(cmd, "subject-type"),
 		Audience:                flagx.MustGetStringSlice(cmd, "audience"),
 	}
diff --git a/cmd/clients_create.go b/cmd/clients_create.go
index 542fdf8fcca..6d3ed4f10d3 100644
--- a/cmd/clients_create.go
+++ b/cmd/clients_create.go
@@ -54,6 +54,7 @@ func init() {
 	clientsCreateCmd.Flags().String("tos-uri", "", "A URL string that points to a human-readable terms of service document for the client that describes a contractual relationship between the end-user and the client that the end-user accepts when authorizing the client")
 	clientsCreateCmd.Flags().String("client-uri", "", "A URL string of a web page providing information about the client")
 	clientsCreateCmd.Flags().String("logo-uri", "", "A URL string that references a logo for the client")
+	clientsCreateCmd.Flags().StringSlice("allowed-cors-origins", []string{}, "The list of URLs allowed to make CORS requests. Requires CORS_ENABLED.")
 	clientsCreateCmd.Flags().String("subject-type", "public", "A URL string that references a logo for the client")
 	clientsCreateCmd.Flags().String("secret", "", "Provide the client's secret")
 	clientsCreateCmd.Flags().StringP("name", "n", "", "The client's name")