When implementing MomentScience products, including Perkswall, Moments, and other native Offer experiences, you may need to define a strict Content Security Policy (CSP) to meet your security or compliance requirements.

This guide outlines the domains that should be explicitly allowed in your CSP configuration to ensure all assets load correctly. These domains support key features such as API communication, creative rendering, analytics tracking, embedded content, and styling.

If your site blocks external scripts, fonts, or other resources by default, be sure to add the domains listed below to the appropriate directives.

Used for backend API calls, event tracking, and offer delivery services:

Required for loading fonts used in MomentScience user experiences:

Used for embedding components such as Perkswall and Moments:

Domains used to serve offer creatives, icons, and tracking pixels:

Sources for JavaScript libraries, SDKs, and analytics scripts:

Required if inline event handlers or dynamically generated scripts are restricted:

Used for loading stylesheets required by Moments and Perkswall experiences:

Include these sources if you restrict inline style attributes:

📢 If you're running into any issues while going through the integration process, feel free to contact us at help@momentscience.com