Your files stay on your device

# Permissions policy checker

Paste a Permissions-Policy header and get every directive checked for unknown features, bad allowlists, duplicates and legacy Feature-Policy syntax.
Permissions-Policy header value

Paste a policy to grade it.

This tool is paste-only. Browsers cannot read another site's response headers, and this page never fetches anything, so the header has to come from you: your server config, curl -sI, or a DevTools network pane. Unknown names are advisory, not proof of a mistake, because the registry cannot cover features a browser shipped after it was frozen.
Options

## More web & auth tools

- [CSP evaluator & builder](/web/csp)
- [HTTP header parser](/web/headers)
- [Cookie analyzer](/web/cookie)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/permissions-policy-checker
Markdown version: https://nutter.tools/web/permissions-policy-checker.md
Plain-text version: https://nutter.tools/web/permissions-policy-checker.txt
Agent index: https://nutter.tools/llms.txt