# Annoucing new public RPC nodes for Tezos Community
**URL:** https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082
**Category:** Community Updates
**Tags:** rpc
**Created:** [May 29, 2026, 10:01pm UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082 "2026-05-29T22:01:50Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@ajinkyaraj-23](https://forum.tezosagora.org/u/ajinkyaraj-23)
#### Post date: [May 29, 2026, 10:01pm UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082/1 "2026-05-29T22:01:50Z")
Hello All,
In order to provide additional support to Tezos community, the infra team at Trilitech has launched following public RPC nodes which could be used by Dapps and Wallets and other tools for free under rate limit, in addition to the list of RPC node already published [here](https://taquito.io/docs/24.3.0/rpc_nodes/).
Tezos Mainnet: [https://tezos-mainnet.octez.io](https://tezos-mainnet.octez.io/version)
Tezos Shadownet: [https://tezos-shadownet.octez.io](https://tezos-shadownet.octez.io/version)
For technical questions or any RPC nodes related issue, you can raise an issue on our discord channel [Tezos Blockchain](https://discord.gg/tezos)
---
### Author:  [@RichAyotte](https://forum.tezosagora.org/u/RichAyotte)
#### Post date: [May 30, 2026, 12:12pm UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082/2 "2026-05-30T12:12:26Z")
Please update this page.
> **[Public and private RPC nodes - Nodes | Tezos Documentation](https://docs.tezos.com/architecture/nodes#public-and-private-rpc-nodes)**
>
> Tezos nodes are peer-to-peer programs running the Tezos protocol to participate in the Tezos network. Anyone can run a Tezos node. | Tezos nodes are peer-to-peer programs running the Tezos protocol to participate in the Tezos network.
---
### Author:  [@v32](https://forum.tezosagora.org/u/v32)
#### Post date: [May 31, 2026, 2:10am UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082/3 "2026-05-31T02:10:07Z")
this is a great update that developers deserved to have a month ago with guides on how to set these for redundancy or security so there won’t be problems in the future… but also deserved to have after setting up working SSL certificates. as of writing I am seeing handshake errors.
---
### Author:  [@jevonearth](https://forum.tezosagora.org/u/jevonearth)
#### Post date: [June 1, 2026, 5:33pm UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082/4 "2026-06-01T17:33:09Z")
@ajinkyaraj-23 and Trillitech team. Congratulations for securing the required resources at Trilitech to allow your team to operate more of the Tezos/X infrastructure!
Will you have a dedicated status page for your new RPC services? I will list the new services on Taquitos docs and APIs.
Best of luck!
---
### Author:  [@jevonearth](https://forum.tezosagora.org/u/jevonearth)
#### Post date: [June 1, 2026, 6:19pm UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082/5 "2026-06-01T18:19:17Z")
Hi Ajinka and team,
Again, congrats on getting the new public octez nodes up. More community RPC infrastructure is genuinely good for the ecosystem, and it’s great to see Trilitech stepping in to run so much of it!
We went to wire `tezos-mainnet.octez.io` and `tezos-shadownet.octez.io` into the Taquito docs (which run live code examples in the browser) and hit a snag: the nodes aren’t currently usable from browser-based dapps. The CORS config looks half-applied rather than intentionally locked down, so I figured I’d save you the debugging.
Specifically, the preflight is the problem. An `OPTIONS` request returns:
```auto
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
```
but no `Access-Control-Allow-Origin` header. Browsers treat the missing origin as a hard fail, so any dapp calling the RPC directly from front-end JS/Taquito gets blocked at the preflight. Server-side and CLI usage are unaffected, it’s purely the browser path.
If these nodes are meant for dapps and wallets (as the announcement suggests), you’ll want the preflight to return an allowed origin. Two options:
1. **`Access-Control-Allow-Origin: *`** — open to all origins. This is what the other public Tezos RPCs do (SmartPy, TzKT, the teztnets nodes), and it’s the path of least friction for dapp devs. Pair it with IP-based rate limiting and you get abuse control without blocking browsers.
2. **Origin allowlist** — reflect `Origin` against an approved list. More control, but every dapp has to register domains (including localhost and preview deploys), and since anyone can still hit the node from a script, it gates browsers without really gating access. Most public RPC operators land on option 1 for exactly that reason.
Once you fix your new RPC nodes, we can confirm the preflight from the Taquito side and add the endpoints to our docs’ RPC list.
Best,
Jev
---
### Author:  [@jevonearth](https://forum.tezosagora.org/u/jevonearth)
#### Post date: [June 3, 2026, 6:32pm UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082/6 "2026-06-03T18:32:07Z")
@ajinkyaraj-23 Thanks for sorting the CORS headers,`Access-Control-Allow-Origin: *` is showing on the preflight and the responses now, so browser dapps are unblocked. Appreciated.
The bigger problem is still there, though: the nodes aren’t usable as a public RPC because the RPC interface is wide shut. They’re serving Octez’s default _remote_ ACL, the whitelist you get when you bind `--rpc-addr` to a public interface and leave it at that. Anything outside that whitelist comes back `401 Unauthorized`, and that covers a lot of what wallets and libraries actually call.
To be clear, that default is the _right_ policy for a baker’s own node, it’s there to keep strangers off the expensive and dangerous surface. Which is kind of the point: these were announced as public RPC nodes for dapps, wallets and tools, but they’re configured like private baker nodes. The ACL never got adapted to the thing you’re advertising.
Concretely, against `tezos-shadownet.octez.io` today, and `tezos-mainnet.octez.io` is identical, same policy, so neither was looked at:
**Blocked (401), all of it needed by dapps/wallets:**
- `POST …/context/contracts//ticket_balance`
- `POST …/context/contracts//script/normalized`
- `GET …/context/delegates`
- `GET …/context/destination//index`
- `GET /chains/main/protocols` (and `/protocols/`)
- `GET …/helpers/baking_rights`
- `GET …/helpers/attestation_rights`
- `GET …/context/raw/bytes/**`
The write/simulate path is fine, `run_operation`, `simulate_operation`, `forge`, `preapply` and `injection/operation` all work, as do the common reads, so estimation and injection are OK. It’s the query, metadata and normalization endpoints that are walled off. (The POSTs are the tell: the default whitelist only allows `big_map_get`, `injection/operation` and `context/seed`, so every other POST query 401s.)
The fix is on your side — it’s your ACL to scope — but the short version is the public listener needs a policy built for serving dapps, not the stock baker default. I’d steer clear of `--allow-all-rpc` though; you don’t want `injection/block` and the admin surface open to the world.
For reference, ~25 of Taquito’s integration tests fail against these nodes right now purely on the ACL.
---
### Author:  [@ajinkyaraj-23](https://forum.tezosagora.org/u/ajinkyaraj-23)
#### Post date: [June 8, 2026, 1:15pm UTC](https://forum.tezosagora.org/t/annoucing-new-public-rpc-nodes-for-tezos-community/7082/7 "2026-06-08T13:15:25Z")
Hi @jevonearth ,
thanks for raising these issues. They have been all fixed except
`GET …/context/raw/bytes/**`