Knowledge Base
ReadOtter Network Guidance for IT Administrators
This page explains the limited internet access ReadOtter requires for adding books using the search or scanning option with iPhones and iPads on a managed network.
How ReadOtter Uses the Internet
ReadOtter's core library features run on the device. Teachers manage books, students, checkouts, and reading logs locally without transmitting student data. See our Privacy Policy for details.
The main feature that uses the internet is adding books through the scanning or search feature. When a teacher scans a new book's barcode or ISBN that they want to add to their library, the app checks the Open Library database to find book details and a cover image. That information is saved to the device, and future lookups are no longer needed.
ReadOtter also offers an optional iCloud backup and sync feature. If a teacher has a ReadOtter Premium subscription and enables that feature, their app data is stored in the device's private iCloud account through Apple's infrastructure.
Recommended Allowlist
If your goal is to let teachers scan books into their ReadOtter library without opening up broad browsing, the most precise option is to allow only the Open Library hosts and requests listed below.
Allow hostnames
- openlibrary.org on HTTPS port 443
- covers.openlibrary.org on HTTPS port 443
Allow HTTP methods
- GET only
Allow paths if your filter supports TLS inspection
If your web filter can inspect HTTPS traffic, you can limit access to these exact paths:
Book lookup by ISBN
^/isbn/[0-9Xx-]+\.json$Author lookup
^/search\.json(\?.*)?$Cover images
^/b/(isbn|olid)/[A-Za-z0-9]+-L\.jpg$Optional: User-Agent rule
Some web filters support rules based on the HTTP User-Agent header. ReadOtter sends the following user agent when requesting book data, where <version> represents the actual app version number installed (e.g. 1.2.1):
ReadOtter/<version> ([email protected])If your filtering platform supports user-agent conditions, this value can be used alongside the hostname rules for openlibrary.org and covers.openlibrary.org.
Practical Setup for Most School Environments
- Allow HTTPS access to openlibrary.org and covers.openlibrary.org.
- If your filter supports TLS inspection, limit access to the exact paths listed above and allow GET only.
- If teachers will use iCloud backup or sync, also allow the Apple iCloud services your district normally permits for managed App Store apps.
- Test on a managed iPhone or iPad: add a new book by scanning its ISBN barcode to confirm that the title and cover load in ReadOtter.
Support
If your school or district needs help validating traffic patterns or confirming the intended app user agent, contact us through the ReadOtter contact page.