KKorrali Web

Security headers › Permissions-Policy

How to add the Permissions-Policy header in Vercel

Permissions-Policy turns browser features such as camera, microphone and geolocation on or off for your site and any embedded frames.

Vercel configuration (vercel.json)

{
  "headers": [
    {
      "source": "/(.*)",
      "headers": [
        {
          "key": "Permissions-Policy",
          "value": "camera=(), microphone=(), geolocation=()"
        }
      ]
    }
  ]
}

Add to vercel.json at the project root and redeploy. Next.js projects on Vercel can set headers in next.config instead.

Before you deploy

Only disable features you do not use. List each feature your site needs with an allowlist such as camera=(self).

Verify it works

curl -sI https://your-site.com | grep -i permissions-policy

Or run a free Korrali Web scan to check this and every other security header at once.

Scan your site free

Other headers in Vercel