ZuploZuplo
LoginSign Up
  • Documentation
  • API Reference
Introduction
Getting Started
    Develop using the Portal
      1 - Setup Your Gateway2 - Rate Limiting3 - API Key Auth4 - Deploy5 - Dynamic Rate LimitingMCP - Quick start
    Develop Locally
      1 - Setup Your Gateway2 - Rate Limiting3 - API Key Auth
Concepts
Development
Policies
    Policy Catalog
    Authentication
    Authorization
    Security & Validation
    Metrics, Billing & Quotas
    Testing
    Request Modification
    Response Modification
      Transform Response Body PolicyRemove Response Headers PolicyClear Response Headers PolicySet Headers PolicySet Status Code PolicyXML to JSON PolicyReplace String in Response Body PolicyHTTP Deprecation Policy
    Upstream Authentication
    Archival
    GraphQL
    Other
    Guides
Handlers
API Keys
MCP Server
MCP Gateway
AI Gateway
Developer Portal
Monetization
Deploying & Source Control
Observability
Networking & Infrastructure
Account Management
Programming API
Build with AI
Zuplo CLI
Migration Guides
Platform LimitsSecuritySupportTrust & ComplianceChangelog
powered by Zudoku
Response Modification

Clear Response Headers Policy

Removes all headers from the response except for those in the exclude list.

Configuration

The configuration shows how to configure the policy in the 'policies.json' document.

config/policies.json
{ "name": "my-clear-headers-outbound-policy", "policyType": "clear-headers-outbound", "handler": { "export": "ClearHeadersOutboundPolicy", "module": "$import(@zuplo/runtime)", "options": { "exclude": ["my-header", "aws-request-id"] } } }

Policy Configuration

  • name <string> - The name of your policy instance. This is used as a reference in your routes.
  • policyType <string> - The identifier of the policy. This is used by the Zuplo UI. Value should be clear-headers-outbound.
  • handler.export <string> - The name of the exported type. Value should be ClearHeadersOutboundPolicy.
  • handler.module <string> - The module containing the policy. Value should be $import(@zuplo/runtime).
  • handler.options <object> - The options for this policy. See Policy Options below.

Policy Options

The options for this policy are specified below. All properties are optional unless specifically marked as required.

  • exclude <string[]> - The headers that should not be removed.

Using the Policy

Read more about how policies work

Edit this page
Last modified on May 29, 2026
Remove Response Headers PolicySet Headers Policy
On this page
  • Configuration
    • Policy Configuration
    • Policy Options
  • Using the Policy
JSON