URLs Used by Minecraft Education

Minecraft Education is built on a services-based architecture that requires communication from the application to external services on the internet. This architecture allows students to access new features such as the Immersive Reader and new lesson content. In order to allow communication with these external services, your school network will need to allow traffic between Minecraft Education and a set of service endpoints. Allowing the following set of URLs will allow access to these services that are integrated into the application itself.

List of all URLs used by Minecraft Education

This is the list of all the URLs used by Minecraft Education.

Additional URLs for Microsoft auth & Azure services:

• Office 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn
  • See "Microsoft 365 Common and Office Online" section for URLs that relate to the Microsoft login services we use. IDs 56 and 59 in this section are the most relevant to what Minecraft Education uses. Please note however that different organizations may use different URLs. If your network may be blocking our services, you can compare the URLs you're blocking to the list above to see if the URLs are ours. 

You will also need to ensure the following processes can run while logging in:

• Minecraft.AdalServer.exe  (Login)

If you are using SSL Decryption on a Chromebook any url that serves up certificates would need to be added to your bypass list. The article from Google has information here.

For more information on URLs, subdomains, and ports, see our full IT Admin guide here. 

What is the full list of domains that are in the wildcards?

The list of domains can change without notice, and some are CDNs which may be different regionally, so while we will attempt to keep this list up to date and complete, if possible we recommend you use the wildcards (*) above instead of managing specific sub-domains.

List of minimum URLs required for Minecraft Education

The Minecraft Education library uses the Microsoft owned services PlayFab and XForge to deliver library content and RTEP to gather error reports and logs. While we recommend allowing all xboxlive.com subdomains to help protect against future architecture changes such as additional authentication calls or the introduction of new CDNs, it is possible to limit the number of xboxlive.com services to just those currently used by XForge:

• https://xforge.xboxlive.com/
• https://xforgeassets001.xboxlive.com/
• https://xforgeassets002.xboxlive.com/

The URLs do not open your network to unwanted activity

Minecraft Education only uses services from reputable sources that have been audited for compliance with all relevant security and privacy standards.  The communications between Minecraft Education and these services is limited to data sharing between the application and the service and the services we use are generally not available for web traffic.  

The xboxlive.com and playfabapi.com services connect Minecraft Education to our content hosting service which allows for much quicker access to our instructional content.  Opening your network to these URLs allows authenticated communication to all Xbox services hosted on xboxlive.com. It does not allow access to public websites like xbox.com.