Your files stay on your device

# Permissions policy generator

Pick a feature, choose who may use it, and get a correct Permissions-Policy header value to copy into your server config.

Add a directive to build the header value.

The value is re-checked against the same grammar the checker grades while it is built, so a malformed origin is refused here instead of failing in your server config. Deploying a directive replaces the browser's default allowlist for that feature, and every frame you did not name is denied, subdomains of your own included. The registry is frozen at 2026-11; features shipped after that are not in the list.
Options

## More web & auth tools

- [CSP evaluator & builder](/web/csp)
- [Deep probes](/browser/probes)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/permissions-policy-generator
Markdown version: https://nutter.tools/web/permissions-policy-generator.md
Plain-text version: https://nutter.tools/web/permissions-policy-generator.txt
Agent index: https://nutter.tools/llms.txt