CORS errors when embedding NICE CXone Messenger in Next.js

Trying to drop the CXone Messenger widget into a Next.js app using the standard embed script. Getting a CORS error immediately on load.

Access to script 'https://app.niceincontact.com/...' from origin 'http://localhost:3000' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

The origin isn’t in the allowed list in the CXone admin console yet. Is there a way to bypass this during local dev? Or do I have to whitelist localhost?