diff --git a/website/content/api-docs/system/auth.mdx b/website/content/api-docs/system/auth.mdx
index a4381088d89f..64e71efc2f25 100644
--- a/website/content/api-docs/system/auth.mdx
+++ b/website/content/api-docs/system/auth.mdx
@@ -127,10 +127,10 @@ For example, enable the "foo" auth method will make it accessible at
     in the UI-specific listing endpoint. Valid values are `"unauth"` or `"hidden"`,
     with the default `""` being equivalent to `"hidden"`.
 
-  - `passthrough_request_headers` `(array: [])` - List of headers to whitelist
+  - `passthrough_request_headers` `(array: [])` - List of headers to allow
     and pass from the request to the plugin.
 
-  - `allowed_response_headers` `(array: [])` - List of headers to whitelist,
+  - `allowed_response_headers` `(array: [])` - List of headers to allow,
     allowing a plugin to include them in the response.
 
   - `plugin_version` `(string: "")` – Specifies the semantic version of the plugin
@@ -325,10 +325,10 @@ can be achieved without `sudo` via `sys/mounts/auth/[auth-path]/tune`._
   in the UI-specific listing endpoint. Valid values are `"unauth"` or `"hidden"`,
   with the default `""` being equivalent to `"hidden"`.
 
-- `passthrough_request_headers` `(array: [])` - List of headers to whitelist
+- `passthrough_request_headers` `(array: [])` - List of headers to allow
   and pass from the request to the plugin.
 
-- `allowed_response_headers` `(array: [])` - List of headers to whitelist,
+- `allowed_response_headers` `(array: [])` - List of headers to allow,
   allowing a plugin to include them in the response.
 
 - `token_type` `(string: "")` – Specifies the type of tokens that should be
diff --git a/website/content/api-docs/system/mounts.mdx b/website/content/api-docs/system/mounts.mdx
index 284f59cc6ca8..55d64f9e5835 100644
--- a/website/content/api-docs/system/mounts.mdx
+++ b/website/content/api-docs/system/mounts.mdx
@@ -160,10 +160,10 @@ This endpoint enables a new secrets engine at the given path.
     in the UI-specific listing endpoint. Valid values are `"unauth"` or
     `"hidden"`. If not set, behaves like `"hidden"`.
 
-  - `passthrough_request_headers` `(array: [])` - List of headers to whitelist
+  - `passthrough_request_headers` `(array: [])` - List of headers to allow
     and pass from the request to the plugin.
 
-  - `allowed_response_headers` `(array: [])` - List of headers to whitelist,
+  - `allowed_response_headers` `(array: [])` - List of headers to allow,
     allowing a plugin to include them in the response.
 
   - `plugin_version` `(string: "")` – Specifies the semantic version of the plugin
@@ -367,10 +367,10 @@ This endpoint tunes configuration parameters for a given mount point.
   the UI-specific listing endpoint. Valid values are `"unauth"` or `"hidden"`.
   If not set, behaves like `"hidden"`.
 
-- `passthrough_request_headers` `(array: [])` - List of headers to whitelist
+- `passthrough_request_headers` `(array: [])` - List of headers to allow
   and pass from the request to the plugin.
 
-- `allowed_response_headers` `(array: [])` - List of headers to whitelist,
+- `allowed_response_headers` `(array: [])` - List of headers to allow,
   allowing a plugin to include them in the response.
 
 - `allowed_managed_keys` `(array: [])` - List of managed key registry entry names