A header value, the full header line(s), curl -I output, or a <meta> tag all work.
Don't have your policy at hand? Here's how to find it
Your site address (optional)
Used to understand 'self'. Never sent anywhere.
You'll get a plain-language explanation, what the policy allows, whether your tools will work with it, and a message for your IT team.