Firewall Ports - Jamie Docs

All Jamie connections are outbound only (client → server). No inbound rules are required. Everything except the TURN relays runs over port 443/TCP.

Minimal configuration: allowlist *.meetjamie.ai and turn.cloudflare.com on 443/TCP, plus 3478/UDP, 3478/TCP, and 5349/TCP to turnv2.meetjamie.ai. The remaining endpoints depend on which login method, calendar, and integrations you use.

Core services

Required for Jamie to work.

Endpoint	Protocol	Purpose
`app.meetjamie.ai`	HTTPS/WSS	Web application & API
`api.meetjamie.ai`	HTTPS/WSS	Backend API

Audio streaming (TURN relays)

Jamie streams meeting audio over WebRTC. When a direct connection isn’t possible, audio goes through a TURN relay. Jamie offers several relays and uses whichever connects first. Which relays your account is offered can change as Jamie moves traffic between providers, so allowlist all of them.

Endpoint	Ports	Purpose
`turn.cloudflare.com`	443/TCP, 5349/TCP	Cloudflare TURN over TLS. Works through a firewall that only allows 443
`turnv2.meetjamie.ai`	3478/UDP, 3478/TCP, 5349/TCP	Jamie-operated TURN relay over UDP, TCP, and TLS
`turn.meetjamie.ai`	3478/UDP, 53/UDP, 3478/TCP, 80/TCP	Cloudflare TURN on a Jamie domain. Optional, lower latency
`stun.meetjamie.ai`	3478/UDP, 53/UDP	STUN network address discovery. Optional

turn.meetjamie.ai and stun.meetjamie.ai are aliases of Cloudflare’s turn.cloudflare.com and stun.cloudflare.com, so they resolve to Cloudflare addresses.
turnv2.meetjamie.ai has a fixed IP address, 35.242.212.136, for firewalls that allowlist by IP.

Authentication

Depending on your login method.

Endpoint	Protocol	Purpose
`appleid.apple.com`	HTTPS	Apple Sign-In
`accounts.google.com`	HTTPS	Google Sign-In
`oauth2.googleapis.com`	HTTPS	Google OAuth token
`login.microsoftonline.com`	HTTPS	Microsoft / Entra Sign-In

Calendar integration

Optional — only needed if you connect a calendar.

Endpoint	Protocol	Purpose
`graph.microsoft.com`	HTTPS	Microsoft Calendar & Contacts
`www.googleapis.com`	HTTPS	Google Calendar API

Telemetry & updates

Endpoint	Protocol	Purpose
`*.ingest.de.sentry.io`	HTTPS	Error tracking (EU)
`api.github.com`	HTTPS	Update check
`github.com`	HTTPS	Update download

Notes

Only outbound connections. No inbound rules.
Allow 3478/UDP to turnv2.meetjamie.ai for the lowest audio latency. Where UDP is blocked, audio falls back to TURN over TCP or TLS.
Minimal configuration: *.meetjamie.ai and turn.cloudflare.com on 443/TCP, plus 3478/UDP, 3478/TCP, and 5349/TCP to turnv2.meetjamie.ai.

​Core services

​Audio streaming (TURN relays)

​Authentication

​Calendar integration

​Telemetry & updates

​Notes

Core services

Audio streaming (TURN relays)

Authentication

Calendar integration

Telemetry & updates

Notes