`responseHeaders`

Products:RedocRevelReefRealm

Plans:ProEnterpriseEnterprise+

Configure custom response headers for your project. Custom headers are added to the response header object if requested resource matches a configured pattern.

Pages that ask for credentials or for access approval keep the security headers they set, such as Content-Security-Policy. These pages are the MCP server authorization page and the page where users add API credentials for MCP clients. Your configured headers do not replace those headers, but other configured headers still apply.

Options

Patterns map

Option	Type	Description
{glob pattern}	[Header object]	REQUIRED. A glob pattern used to match requested resource. It can match any assets, routes, or both.

Header object

Option	Type	Description
name	string	Response header name
value	string	Response header value

Examples

The following is an example of custom headers for CSS, JS files, and a /my-markdown/ route:

responseHeaders:
  '**/*.js':
    - name: X-Content-Type-Options
      value: nosniff
    - name: Cache-Control
      value: no-cache

  '**/*.css':
    - name: X-XSS-Protection
      value: 1; mode=block

  /my-markdown/:
    - name: X-Frame-Options
      value: DENY

Resources

Block search indexing - Use responseHeaders to control search engine indexing and SEO optimization strategies

responseHeaders