Domain Whitelisting

In case your organisation enforces strict network policies or you wish to implement an allowlist for added control, we recommend whitelisting the following domains using wildcard expressions to ensure full platform functionality.

The domains fall into two categories:

  • End-user domains – required for your users accessing services such as registration and authentication:

    • Project Domain - The URL used for communication with the MIRACL Trust API. You can find it on your project’s General configuration page in the MIRACL Trust Portal.

    • Mobile Deep Link Domain - the URL for deep linking into a mobile application, available on your project’s Mobile Applications configuration page in the MIRACL Trust Portal.

    • *.mpin.io - Used by the platform’s general API and the Distributed Trusted Authority (DTA) endpoints.

      The DTA’s .mpin.io base domain is fixed, but the subdomain portion is dynamic and may change over time. For this reason, we recommend using the wildcard *.mpin.io instead of whitelisting individual subdomains.

      Examples of DTA subdomains: us-east4-dta1.mpin.io, europe-west2-dta1.mpin.io

  • Administrator domains – needed for accessing the MIRACL Trust Portal or performing back-end operations:

    • *.miracl.cloud - used by the MIRACL Trust Portal.