Mindsmith loads lessons live from Mindsmith's servers, so the computers and phones your learners use need to reach a few web addresses. Some workplace networks only allow approved web addresses, and this article lists the ones Mindsmith needs.
Start here
Your IT or network team makes the change. Your part is to send them this page, answer a few questions, and check the result.
Send this article to your IT or network team.
Tell them which of the items below apply to your organization, so they allow only what you need. If you're not sure, ask them to allow all of them.
After they make the changes, open app.mindsmith.ai/learner-network-check on an affected computer to confirm. It works without a Mindsmith login.
Which of these apply to you?
Lessons include YouTube, Vimeo, Mux, or Google Docs content
Lessons include voice conversation tiles
Lessons use photos or GIFs from Unsplash or GIPHY
People who build lessons work on the same network
Those people use Editable Video or Sign in with Google
A domain is a web address such as mindsmith.ai. An allowlist is the list of domains your network lets people reach.
Learner access
Required for all learners
Allow both of these. For learner content, allow both mindsmithusercontent.com and *.mindsmithusercontent.com, because some network systems do not treat the wildcard as covering the root domain.
*.mindsmith.ai
The Mindsmith app, including sign-in, lessons, progress tracking, and real-time features.
mindsmithusercontent.com
*.mindsmithusercontent.com
Lesson content hosted by Mindsmith, including uploaded and AI-generated images, audio narration, captions, code tiles, theme fonts, video files, and scenario character images.
Also allow for now
storage.googleapis.com
Mindsmith is moving lesson content from Google Cloud Storage to mindsmithusercontent.com. Some organizations still receive content from Google Cloud Storage, and older lessons can reference it. Keep it allowed until Mindsmith confirms you can remove it. People who build lessons always need it.
Recommended
This service is not required, but we recommend allowing it.
*.cloudflarestream.com
Streams some Mindsmith-hosted videos. If it is blocked, those videos play from Mindsmith's own content hosting instead. Allowing it now avoids another allowlist change if Mindsmith streams more video from it later.
Only if your lessons use them
Mindsmith contacts these services only when a lesson includes the matching content. The learner's browser connects to the provider directly, and a blocked service affects only the tiles that use it.
Voice conversation tiles
generativelanguage.googleapis.com
Unsplash photos
images.unsplash.com
Photos an author picks from Unsplash load straight from Unsplash.
GIPHY GIFs
media.giphy.com and media0.giphy.com through media4.giphy.com
YouTube
*.googlevideo.com
i.ytimg.com
Vimeo
vimeo.com
player.vimeo.com
*.vimeocdn.com
*.akamaized.net
Mux video
stream.mux.com
image.mux.com
Used only by video tiles that have Mux playback turned on.
Google Docs and Slides
docs.google.com
Content authors
If the people who build lessons work on the same restricted network, allow the learner domains above plus storage.googleapis.com, which authors always need. The other domains in this section each power one feature, and blocking one affects only that feature. If only your learners are on a restricted network, you can skip this section. The live network check tests learner access only.
Required for authors
storage.googleapis.com
The editor loads your lesson images, audio, video, and fonts from this domain, and uploads go straight to it. Without it, media in the editor shows as broken and uploads fail.
Required only for specific features
Sign in with Google
accounts.google.com
Not needed if your authors sign in with email and password or SSO.
Editable Video
cdnjs.cloudflare.com
cdn.jsdelivr.net
fonts.googleapis.com
fonts.gstatic.com
videos.pexels.com
images.pexels.com
Without the two CDNs, scene previews won't load. Without Google Fonts, previews show fallback fonts. Without Pexels, stock video search shows no previews. Scene images, avatar clips, and narration load from storage.googleapis.com, which authors already need. Finished videos still play for learners.
Optional
Image search
images.unsplash.com
media.giphy.com and media0.giphy.com through media4.giphy.com
encrypted-tbn0.gstatic.com
Thumbnails in the editor's image search. If blocked, search results show blank thumbnails. Uploading and generating images still work.
Google Fonts
fonts.googleapis.com
fonts.gstatic.com
Only for older themes whose font isn't on Mindsmith's font list. If blocked, that text shows in a fallback font.
In-app support chat
The domains on Intercom's list. If blocked, the chat won't open. Email [email protected] instead.
Google profile photos
lh3.googleusercontent.com
If blocked, people's initials show instead of their Google profile photos.
Voice samples
If blocked, samples won't play when you choose a voice for a voice conversation tile.
To preview YouTube, Vimeo, Mux, Google Docs, Unsplash, GIPHY, or voice conversation content in the editor, authors also need the matching domains from the learner section.
Guidance for your network team
All connections are outbound over standard HTTPS (port 443). No inbound connections are required.
Allow secure WebSocket (WSS) connections to *.mindsmith.ai, and to generativelanguage.googleapis.com if lessons use voice conversation tiles. Some web filters block WebSockets even when the domain itself is allowed.
Allowlist by domain name, not by IP address. Mindsmith serves content from cloud services whose IP addresses change.
Adding these domains is safe to do in advance and will not disrupt other traffic.
After making changes, confirm them from an affected device and network with the live check at app.mindsmith.ai/learner-network-check.
Troubleshooting
Start with the live network check on the computer and network that is having trouble. It names the learner services that are blocked. If a required check fails, use Copy affected domains and send that list, with this article, to your IT team.
A lesson or SCORM/LMS launch shows a grey or blank screen.
Run the learner network check on the same computer and network. If it reports blocked Mindsmith domains, send the results and this article to your IT team.
The lesson loads but images, audio, or video are missing.
Check mindsmithusercontent.com, *.mindsmithusercontent.com, and storage.googleapis.com. Photos and GIFs an author picked from Unsplash or GIPHY load from images.unsplash.com and the GIPHY domains. Allow the blocked service and reload.
Still stuck? Email [email protected], or use Contact support in the in-app help menu. Include a screenshot of the network check results and where the learner was, for example in the office, at home, or launching through your LMS.