Your files stay on your device

Permissions policy generator

Pick a feature, choose who may use it, and get a correct Permissions-Policy header value to copy into your server config.

Add a directive to build the header value.

The value is re-checked against the same grammar the checker grades while it is built, so a malformed origin is refused here instead of failing in your server config. Deploying a directive replaces the browser's default allowlist for that feature, and every frame you did not name is denied, subdomains of your own included. The registry is frozen at 2026-11; features shipped after that are not in the list.
Options

More web & auth tools

- CSP evaluator & builder (/web/csp)
- Deep probes (/browser/probes)
All web & auth tools (/web)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/web/permissions-policy-generator
Markdown version: https://nutter.tools/web/permissions-policy-generator.md
Plain-text version: https://nutter.tools/web/permissions-policy-generator.txt
Agent index: https://nutter.tools/llms.txt