In this page
Overview

DatoCMS Domains and Content Security Policy (CSP)

Last updated: 2026-01-12

If you're trying to whitelist our domain names for the purposes of browser Content Security Policy or similar needs, this is a list of the domains used by our services.

For API requests:

For images and assets:

For HLS video streaming:

Other

  • If you’re embedding the DatoCMS admin interface or using plugins: *.admin.datocms.com (the CMS editor interface).

  • Your plugin is likely hosted elsewhere, outside of DatoCMS altogether, like a Vercel or Netlify site.

  • If you’re on an Enterprise plan with a custom asset domain, you’d replace www.datocms-assets.com with your custom domain. The same applies if you use a custom CMS admin domain.

For humans only

These sites are unlikely to be useful to APIs, but you may wish to whitelist them for your human users.

Last updated: January 13th, 2026

Did this doc help you?
Yes
No
Would you like to add more information?
Optional
To receive further updates or address your feedback, kindly share your email address with us.
Optional

If you need a reply, please contact support instead.

Need help?
Explore our forum, contact support, or connect with our sales team . You can also chat live with other users in our Slack channel.