Mindsmith loads lessons live from Mindsmith's servers. Learner devices need access to the three required services below. This article also explains when Google Cloud Storage remains required during the transition, services that Mindsmith contacts only when an author adds the corresponding feature to a lesson, and the additional services used while authoring.

All traffic is outbound-only over standard HTTPS (port 443), with secure WebSockets (WSS) on the same port for real-time features. No inbound connections are required.

Run a live check. Open app.mindsmith.ai/learner-network-check in a browser on an affected device and network. No Mindsmith login is required, so you can send the link straight to your network team.

Learners and authors have different needs. People taking lessons need the three services in the required section. Some organizations temporarily continue to receive learner assets from Google Cloud Storage. Keep any existing storage.googleapis.com allowance until Mindsmith confirms your organization has moved to mindsmithusercontent.com. YouTube, Vimeo, Generative Language, and Google Docs are used only when an author adds the corresponding feature. People building lessons in the editor need the additional domains in the Content authors section.

The required list below applies to every learner device. The additional sections apply only during the hosting transition, to older lesson assets, or to features an author chose to add.

Allow all three services below. For learner content, allow both mindsmithusercontent.com and *.mindsmithusercontent.com. Some network systems do not treat the wildcard as covering the root domain.

Some organizations temporarily continue to receive current learner assets from Google Cloud Storage while their network allowlists are updated. For those organizations, blocking this domain can prevent current lessons from loading correctly. Keep it allowed until Mindsmith confirms that your organization has moved to mindsmithusercontent.com. It can also be required for older lesson content that references a legacy asset URL.

Mindsmith contacts the services below only when an author adds the corresponding feature to a lesson. They are not required for Mindsmith itself, and a blocked service does not affect lessons that do not use it.

Mindsmith contacts a provider only when an author embeds content from it. The learner's browser connects to that provider directly. A blocked provider affects only its embed tile.

If the people who create lessons also work behind the allowlist, add these domains on top of the learner list above. If only your learners are behind the allowlist, you can skip this section. The live network check does not test these author-only domains.

Authors also reach the learner video and embed hosts above when editing those tile types, plus stream.mux.com, image.mux.com, and *.litix.io for Mux-backed video.

Start with the live network check on the device and network that is having trouble. It names the learner services that are blocked.

A lesson or SCORM/LMS launch shows a grey or blank screen.

Run the learner network check on the same device and network. If it reports blocked Mindsmith domains, send the results and this article to your network team.

The lesson loads but images, audio, or video are missing.

Check mindsmithusercontent.com and *.mindsmithusercontent.com for images and audio, and *.cloudflarestream.com for Mindsmith-hosted video. If the live check marks storage.googleapis.com as required, or Mindsmith has not confirmed your organization has moved, check that domain as well. It can also be needed when only older lesson content is missing. Allow the blocked service and reload.

Still stuck? Contact Mindsmith support from the in-app help menu.