Your files stay on your device

Permissions policy checker

Paste a Permissions-Policy header and get every directive checked for unknown features, bad allowlists, duplicates and legacy Feature-Policy syntax.
Permissions-Policy header value

Paste a policy to grade it.

This tool is paste-only. Browsers cannot read another site's response headers, and this page never fetches anything, so the header has to come from you: your server config, curl -sI, or a DevTools network pane. Unknown names are advisory, not proof of a mistake, because the registry cannot cover features a browser shipped after it was frozen.
Options

More web & auth tools

- CSP evaluator & builder (/web/csp)
- HTTP header parser (/web/headers)
- Cookie analyzer (/web/cookie)
All web & auth tools (/web)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/web/permissions-policy-checker
Markdown version: https://nutter.tools/web/permissions-policy-checker.md
Plain-text version: https://nutter.tools/web/permissions-policy-checker.txt
Agent index: https://nutter.tools/llms.txt