If you meant a specific tool or framework that uses this header (e.g., a custom API gateway, a reverse proxy like Traefik or Envoy), let me know and I can tailor the answer further.
GET /api/users/debug/123 → 404 Not Found x-dev-access yes
x-dev-access-enabled: true x-dev-warning: This response contains internal data If x-dev-access: yes is present but environment validation fails → 403 Forbidden or ignore silently. 🧪 Example Use Case (API Gateway) Without header: If you meant a specific tool or framework
x-dev-access: read-only x-dev-access: verbose-logs x-dev-access: bypass-rate-limit When active, the API adds a response header: a custom API gateway