Skip to main content
Thinking Mode
Help Centre

Allow list — which hosts should my school allow?

Hosts to allow on your school network so Thinking Mode works as intended.

Setup & ITITnetworksetup

Allow the hosts below on your school’s web filter, firewall or proxy so Thinking Mode works as intended. Allow each one over HTTPS (port 443). Where a host says WebSocket, allow secure WebSocket (WSS) on the same host too.

When you have made the changes, open our Network Checker on a school device, on the school network, and click Run All Tests. Every row under Required should pass.

Required

Thinking Mode

  • thinkingmode.com

  • www.thinkingmode.com

The app itself. Allow every path, including /api/. Some filters let the page load but block or redirect requests to /api/, which stops work saving and live updates arriving.

File storage

  • thinking-mode-prod-uploads.s3.ap-southeast-2.amazonaws.com

Our Amazon Web Services storage. It holds the documents students upload, and the pictures, PDFs and videos in task instructions. Allow uploads as well as downloads.

Live updates

  • *.ably.net (HTTPS and WebSocket)

  • *.ably-realtime.com (HTTPS and WebSocket)

Our real-time service, Ably. Teachers and students both use it. It keeps the teacher’s task page up to date, and it is how Readmit, Pause session and Resume session reach students’ screens. The main host is main.realtime.ably.net. The backup hosts are main.a.fallback.ably-realtime.com to main.e.fallback.ably-realtime.com.

Bot check

  • challenges.cloudflare.com

Cloudflare Turnstile. It protects the teacher sign-in, sign-up, password reset and contact forms. If it is blocked, those forms are refused, and a password reset email never arrives.

Email

Make sure your mail filter delivers messages from these addresses to staff:

  • noreply@thinkingmode.com: email confirmation, password resets and other account messages. A teacher can’t sign in until they have confirmed their email.

  • updates@news.thinkingmode.com: product updates.

  • hello@thinkingmode.com: messages from our team.

Optional

Allow these only if you use the feature.

Single sign-on

  • accounts.google.com

  • login.microsoftonline.com

Needed if staff sign in with Connect with Google or Connect with Microsoft.

Intro videos

  • *.loom.com

  • www.youtube-nocookie.com

  • player.vimeo.com

The short videos that introduce each mode, in the app and in help articles, play from one of these services.

Dyslexia-friendly font

  • cdn.jsdelivr.net

Loads OpenDyslexic, one of the fonts a teacher or student can choose in Draft Mode. If it is blocked, the text shows in a fallback font.

Fonts on LMS launch pages

  • fonts.googleapis.com

  • fonts.gstatic.com

The pages Thinking Mode shows inside Canvas or another LMS load their fonts from Google Fonts. If it is blocked, they show in a fallback font.

Payments

  • *.stripe.com

Only for teachers who pay for Thinking Mode themselves. Checkout and billing pages are hosted by Stripe.

Analytics

  • www.googletagmanager.com

  • *.google-analytics.com

Anonymous usage analytics. They load only after a visitor accepts analytics cookies, and never on student task pages.

Home page product demo

  • *.storylane.io

The interactive product demo on the thinkingmode.com home page. It isn’t used in lessons.

Questions? Email support@thinkingmode.com.

Allow list — which hosts should my school allow? — Thinking Mode