In case your website requires strict CSP policies, you may allow the following domains.
Note that CSP stands for Content Security Policy. Some websites implement a CSP policy to restrict which domain names scripts on the website can access.
| Service | Full URL |
|---|---|
| JS, CSS, fonts, images, settings | https://client.crisp.chat |
| Avatars, images | https://image.crisp.chat |
| File downloads & uploads | https://storage.crisp.chat |
| Frames | https://game.crisp.chat |
| WebSocket (messaging) | wss://client.relay.crisp.chat |
| WebSocket (calls, MagicBrowse) | wss://stream.relay.crisp.chat |
Examples
CSP policy
<meta
http-equiv="Content-Security-Policy"
content="img-src data: https://client.crisp.chat https://image.crisp.chat https://storage.crisp.chat; font-src https://client.crisp.chat; media-src https://client.crisp.chat; style-src 'unsafe-inline' https://client.crisp.chat; frame-src https://game.crisp.chat; script-src https://client.crisp.chat https://settings.crisp.chat; connect-src https://client.crisp.chat https://storage.crisp.chat wss://client.relay.crisp.chat wss://stream.relay.crisp.chat"
>