configuring-tauri-capabilities

Tauri capabilities are JSON files placed in the src-tauri/capabilities directory that define fine-grained security permissions for your application's windows. They map specific permissions to window labels, allowing granular control over what APIs each window can access.

Yes, Tauri supports platform-specific capability variants. You can configure rules to apply exclusively to Linux, macOS, Windows, iOS, or Android, ensuring that window-level permissions are tailored to the target platform's requirements.

You integrate capabilities with tauri.conf.json by referencing the capability files to enable or restrict them globally and per-window. This ensures the configured security boundaries in your src-tauri/capabilities directory are properly loaded into the application.

The best way to manage security boundaries in a multi-window Tauri app is organizing capability files by window labels. This method assigns granular permissions per window, minimizing frontend impact and reducing the overall attack surface.

You need capability files in src-tauri/capabilities to control window-level permissions and enforce security boundaries. Without them, managing granular access across multiple windows in your Tauri application becomes complex and exposes a larger attack surface.