Allowlist

All Builder Projects access the following list of URLs. Ensure these are included within your application or organization's allowlist.

firestore.googleapis.com firebasestorage.googleapis.com identitytoolkit.googleapis.com *.builder.io *.builder.codes *.builder.my *.builderio.dev *.builderio.xyz *.fly.dev

Each of these URLs serves the following purpose:

Domain	Description
`firestore.googleapis.com`	Base URL for the Cloud Firestore API.
`firebasestorage.googleapis.com`	Base URL for the Firebase Cloud Storage, which serves content such as photos or videos.
`identitytoolkit.googleapis.com`	Base URL for Google's Identity Toolkit API.
`*.builder.io`	Several Builder operations routed through this URL.
`*.builder.codes`	Sandbox Builder operations are routed through this URL. User-generated applications run on this URL.
`*.builder.my`	Preview URLs utilize this domain.
`*.builderio.dev`	Sandbox Builder operations are routed through this URL. User-generated applications run on this URL.
`*.builderio.xyz`	Legacy operations use this URL. Prefer `builderio.dev` for new configurations. If your existing config uses the `builderio.xyz` URL, you don't need to make any changes.
`*.fly.dev`	Legacy operations used this URL. Currently in the process of being deprecated.

What's next

Was this article helpful?