Egress IP addresses
If your application calls into a firewalled service from a braincell sandbox or a deployed app, here's where the traffic comes from - and how to allow-list it.
| Traffic source | What to allow-list |
|---|---|
| Live projects & previews | Every project runs on braincell's dedicated sandbox hosts, so outbound traffic leaves from a small, stable set of addresses. The current list is available on request - email us and we'll send it for your firewall. |
| Exported apps | Once you export a project and host it yourself, egress follows your own infrastructure. If a third-party service requires a static address, ask the agent to route those calls through a proxy with a stable IP. |
A static published range is planned - it will live on this page, with advance notice before any change. Until then, email security@braincell.sh for the current sandbox-host addresses, or see the docs for connecting projects to private services.
Need a hand with networking?
Describe the service you're connecting to and the agent wires it up - env vars, allow-lists, retries and all.
10 free credits on signup. No credit card.