Currently there is a way to do it with raw JavaScript by using fetch:

fetch("https://example.com/api/data", {
  method: "GET",
  credentials: "omit", // here you decide to send cookie or not. Other options: same-origin, include
})