Choose your language

Choose your login

Support

How can we help?

PaperCut's AI-generated content is continually improving, but it may still contain errors. Please verify as needed.

Lightbulb icon
Lightbulb icon

Here’s your answer

Sources:

* PaperCut is constantly working to improve the accuracy and quality of our AI-generated content. However, there may still be errors or inaccuracies, we appreciate your understanding and encourage verification when needed.

Lightbulb icon

Oops!

We currently don’t have an answer for this and our teams are working on resolving the issue. If you still need help,
User reading a resource

Popular resources

Conversation bubbles

Contact us

System requirements

This page applies to:

Last updated October 10, 2025

Find out which operating systems, platforms, and devices are supported with PaperCut Hive and Pocket.

If you’re looking to see which printers and MFDs are supported with PaperCut Hive and Pocket, take a look at the Supported Printers page.

Client requirements

PaperCut Hive and Pocket user client software

The client software for PaperCut Hive and Pocket authenticates users, allowing them to print into the system. It is also used for print job routing as well as other important functions. The software is primarily downloaded and installed from one of the following locations, either self-served by the user, or pre-deployed by an Administrator:

Supported Environments and Technologies

Description

Operating Systems

Windows 10 (64-bit) / 11 / Windows Server 2016 and later

  • Machine names must conform to Windows NetBIOS naming conventions and be 15 characters and less

  • Windows systems must have the "Internet Printing Client" enabled under "Print and Document Services" in Windows Features

macOS 12 (Monterey) and later

Arm architecture

Arm64 architecture for Windows and macOS are supported

Other devices that support ARM architecture without emulation layers, such as the Raspberry Pi, are not supported.

Memory

1GB minimum

Hard disk

600MB minimum, plus additional storage for logs

CPU

Dual core CPU

Virtual Desktop Infrastructure

  • Persistent, single session VDI solutions are supported. The PaperCut client software must be installed after the session is created (self-serve via the User Portal/classic invitation OR deployed via a software deployment solution)

    • If the PaperCut client software is pre-installed from an image (before session is created), then a duplicated client component will be installed and this will cause issues.

  • All other VDI environments, such as multi-session or non persistent single session are not supported at this time

ChromeOS

ChromeOS supports printing only. See here for more information

Running alongside PaperCut NG/MF

Running PaperCut MF/NG alongside Papercut Hive or Pocket will cause issues. We advise against running both of these together on the same computer.

If you would like to test both our products, we recommend uninstalling one and using the other.

Ghost Trap

Ghost Trap is a required program that converts PostScript data to PDF, enabling the PaperCut Global PS Driver to support all printer manufacturers.

Ghost Trap is also used for thumbnail generation and PDF to URF conversion if a printer supports URF over IPP.

The PaperCut Print Client software will install Ghost Trap if it is not detected on the client system.

Ghost trap has a dependency on MS Visual C++ 2015-2022 Redistributable (x64). This is also installed automatically if not detected on the client system.

GhostTrap download URL (required on Windows Edgenodes to download GhostTrap)

  • https://cdn1.papercut.com/* (Wildcard exception for HTTPS/TCP over port 443)

Web Admin console and User Portal

Latest stable version of all major browsers are supported

Mobile App

  • iOS 17 or later
  • Android 12 or later

Firewall and networking

In many networks, PaperCut Hive and Pocket should ‘just work’. However, if you have a more restrictive firewall policy in place, you may need to open the following ports and URLs to get everything working.

Please note, PaperCut Hive and Pocket are hosted in a region of your choice, so please choose the correct location based on your tenancy.

United States (US) data center

If it's allowed, add the following to your firewall:

  • *.papercut.com

  • storage.googleapis.com

  • securetoken.googleapis.com

  • identitytoolkit.googleapis.com

  • googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • pocket.papercut.com

  • hive.papercut.com

  • pmitc.papercut.com

  • cloudnode.pmitc.papercut.com

  • update.pmitc.papercut.com

  • regions.pmitc.papercut.com

  • mqtt.notifications.cloud.papercut.com

  • mqtt2.notifications.cloud.papercut.com

  • mqtt3.notifications.cloud.papercut.com

  • storage.googleapis.com

  • mobile.pcut.app for ChromeOS devices

  • send.papercut.com for Integrated Scanning in PaperCut Hive

  • \*.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive

  • login.papercut.com

  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token

  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://identitytoolkit.googleapis.com/v1/projects

  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86

  • Domain: papercut.com

Europe (EU) data center

If it's allowed, add the following to your firewall:

  • *.papercut.com

  • storage.googleapis.com

  • securetoken.googleapis.com

  • identitytoolkit.googleapis.com

  • googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • eu.pocket.papercut.com

  • eu.hive.papercut.com

  • eu.pmitc.papercut.com

  • cloudnode.eu.pmitc.papercut.com

  • update.pmitc.papercut.com

  • regions.pmitc.papercut.com

  • mqtt.notifications.cloud.papercut.com

  • mqtt2.notifications.cloud.papercut.com

  • mqtt3.notifications.cloud.papercut.com

  • storage.googleapis.com

  • mobile.eu.pcut.app for ChromeOS devices

  • eu.send.papercut.com for Integrated Scanning in PaperCut Hive

  • \*.eu.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive

  • login.papercut.com

  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token

  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://identitytoolkit.googleapis.com/v1/projects

  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86

  • Domain: papercut.com

United Kingdom (UK) data center

If it's allowed, add the following to your firewall:

  • *.papercut.com

  • storage.googleapis.com

  • securetoken.googleapis.com

  • identitytoolkit.googleapis.com

  • googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • uk.pocket.papercut.com

  • uk.hive.papercut.com

  • uk.pmitc.papercut.com

  • cloudnode.uk.pmitc.papercut.com

  • update.pmitc.papercut.com

  • regions.pmitc.papercut.com

  • mqtt.notifications.cloud.papercut.com

  • mqtt2.notifications.cloud.papercut.com

  • mqtt3.notifications.cloud.papercut.com

  • storage.googleapis.com

  • mobile.uk.pcut.app for ChromeOS devices

  • uk.send.papercut.com for Integrated Scanning in PaperCut Hive

  • \*.uk.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive

  • login.papercut.com

  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token

  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://identitytoolkit.googleapis.com/v1/projects

  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86

  • Domain: papercut.com

Australia (AU) data center

If it's allowed, add the following to your firewall:

  • *.papercut.com

  • storage.googleapis.com

  • securetoken.googleapis.com

  • identitytoolkit.googleapis.com

  • googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • au.pocket.papercut.com

  • au.hive.papercut.com

  • au.pmitc.papercut.com

  • cloudnode.au.pmitc.papercut.com

  • update.pmitc.papercut.com

  • regions.pmitc.papercut.com

  • mqtt.notifications.cloud.papercut.com

  • mqtt2.notifications.cloud.papercut.com

  • mqtt3.notifications.cloud.papercut.com

  • storage.googleapis.com

  • mobile.au.pcut.app for ChromeOS devices

  • au.send.papercut.com for Integrated Scanning in PaperCut Hive

  • \*.au.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive

  • login.papercut.com

  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token

  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://identitytoolkit.googleapis.com/v1/projects

  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86

  • Domain: papercut.com

Canada (CA) data center

If it's allowed, add the following to your firewall:

  • *.papercut.com

  • storage.googleapis.com

  • securetoken.googleapis.com

  • identitytoolkit.googleapis.com

  • googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • ca.pocket.papercut.com

  • ca.hive.papercut.com

  • ca.pmitc.papercut.com

  • cloudnode.ca.pmitc.papercut.com

  • update.pmitc.papercut.com

  • regions.pmitc.papercut.com

  • mqtt.notifications.cloud.papercut.com

  • mqtt2.notifications.cloud.papercut.com

  • mqtt3.notifications.cloud.papercut.com

  • storage.googleapis.com

  • mobile.ca.pcut.app for ChromeOS devices

  • ca.send.papercut.com for Integrated Scanning in PaperCut Hive

  • *.ca.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive

  • login.papercut.com

  • securetoken.googleapis.com

    Or alternatively use this URL, however, it might change in the future:

    https://securetoken.googleapis.com/v1/token

  • identitytoolkit.googleapis.com

    Or alternatively use this URL, however, it might change in the future:

    https://identitytoolkit.googleapis.com/v1/projects

  • googleapis.com

    Or alternatively use this URL, however, it might change in the future:

    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86

  • Domain: papercut.com

On-premise and cloud ports

Port

Protocol

From

To

Reason

9263

HTTP (encrypted payload)

ChromeOS

Edge node

For accepting print jobs from ChromeOS

9264

HTTPS

Windows, macOS, Android, iOS, edge node

Edge node

Job submission, Job replication, Pull a job from spooling edge node to processing edge node (Edge node with access to printer calls the edge node holding the job)

9265

HTTPS

Windows, macOS, Android, iOS

Edge node

Submits the print job into the Edge Mesh

9266

HTTPS

Mobile app

Edge node

Job release in offline mode

443/8883

HTTPS/MQTT

Edge nodes and print clients

PaperCut cloud services

Cloud communication including sending notifications to the edge nodes and replication to the Cloud Node

80/443/631

IPP/IPPS

Edge node

Printers

IPP job submission, Printer discovery

9100

TCP

Edge Node

Printers

Print job delivery when using a manufacturer print driver

161/162

SNMP

Edge Node

Printers

Printer discovery and status monitoring

PaperCut Hive embedded applications

  • For Integrated Scanning:
    • US data center: send.papercut.com
    • UK data center: uk.send.papercut.com
    • EU data center: eu.send.papercut.com
    • AU data center: au.send.papercut.com
  • Use a wildcard for the following URL:
    • US data center: \*.printerapp.papercut.com
    • UK data center: \*.uk.printerapp.papercut.com
    • EU data center: \*.eu.printerapp.papercut.com
    • AU data center: \*.au.printerapp.papercut.com
Unable to use a wildcard for URLs? Discover platform-specific URLs

PaperCut Hive and Pocket Lite Release App MFD URLs

MFD Port Protocol Region URL
Brother 443 HTTPS United States
Europe
United Kingdom
Australia
brother-connect.printerapp.papercut.com
Not available in this region
Not available in this region
Not available in this region
All other platforms 443 HTTPS United States
Europe
United Kingdom
Australia
lite-release.printerapp.papercut.com
lite-release.eu.printerapp.papercut.com
lite-release.uk.printerapp.papercut.com
lite-release.au.printerapp.papercut.com

PaperCut Hive Full Release App MFD URLs

MFD Port Protocol Region URL
Canon 443 HTTPS United States
Europe
United Kingdom
Australia
canon-connect.printerapp.papercut.com
canon.eu.printerapp.papercut.com
canon.uk.printerapp.papercut.com
canon.au.printerapp.papercut.com
Epson 443 HTTPS United States
Europe
United Kingdom
Australia
epson-connect.printerapp.papercut.com
epson.eu.printerapp.papercut.com
epson.uk.printerapp.papercut.com
epson.au.printerapp.papercut.com
Fujifilm 443 HTTPS United States
Europe
United Kingdom
Australia
fujifilm-connect.printerapp.papercut.com
fujifilm.eu.printerapp.papercut.com
fujifilm.uk.printerapp.papercut.com
fujifilm.au.printerapp.papercut.com
Fujifilm LeSF 443 HTTPS United States
Europe
United Kingdom
Australia
lesf-connect.printerapp.papercut.com
lesf.eu.printerapp.papercut.com
lesf.uk.printerapp.papercut.com
lesf.au.printerapp.papercut.com
Fuji Xerox 443 HTTPS United States
Europe
United Kingdom
Australia
fuji-xerox-connect.printerapp.papercut.com
fuji-xerox.eu.printerapp.papercut.com
fuji-xerox.uk.printerapp.papercut.com
fuji-xerox.au.printerapp.papercut.com
HP OXPd 443 HTTPS United States
Europe
United Kingdom
Australia
hp-oxp-connect.printerapp.papercut.com
hp-oxp.eu.printerapp.papercut.com
hp-oxp.uk.printerapp.papercut.com
hp-oxp.au.printerapp.papercut.com
Konica Minolta 443 HTTPS United States
Europe
United Kingdom
Australia
konica-minolta-connect.printerapp.papercut.com
konica-minolta.eu.printerapp.papercut.com
konica-minolta.uk.printerapp.papercut.com
konica-minolta.au.printerapp.papercut.com
Kyocera Hypas 443 HTTPS United States
Europe
United Kingdom
Australia
kyocera-connect.printerapp.papercut.com
kyocera.eu.printerapp.papercut.com
kyocera.uk.printerapp.papercut.com
kyocera.au.printerapp.papercut.com
Lexmark 443 HTTPS United States
Europe
United Kingdom
Australia
lesf-connect.printerapp.papercut.com
lesf.eu.printerapp.papercut.com
lesf.uk.printerapp.papercut.com
lesf.au.printerapp.papercut.com
Ricoh SmartSDK 443 HTTPS United States
Europe
United Kingdom
Australia
ricoh-connect.printerapp.papercut.com
ricoh.eu.printerapp.papercut.com
ricoh.uk.printerapp.papercut.com
ricoh.au.printerapp.papercut.com
Sharp OSA 443 HTTPS United States
Europe
United Kingdom
Australia
sharp-connect.printerapp.papercut.com
sharp.eu.printerapp.papercut.com
sharp.uk.printerapp.papercut.com
sharp.au.printerapp.papercut.com
Sharp LeSF 443 HTTPS United States
Europe
United Kingdom
Australia
lesf-connect.printerapp.papercut.com
lesf.eu.printerapp.papercut.com
lesf.uk.printerapp.papercut.com
lesf.au.printerapp.papercut.com
Toshiba MDS V3 443 HTTPS United States
Europe
United Kingdom
Australia
toshiba-connect2.printerapp.papercut.com
toshiba.eu.printerapp.papercut.com
toshiba.uk.printerapp.papercut.com
toshiba.au.printerapp.papercut.com
Toshiba LeSF 443 HTTPS United States
Europe
United Kingdom
Australia
lesf-connect.printerapp.papercut.com
lesf.eu.printerapp.papercut.com
lesf.uk.printerapp.papercut.com
lesf.au.printerapp.papercut.com
Xerox 443 HTTPS United States
Europe
United Kingdom
Australia
xerox-connect.printerapp.papercut.com
xerox.eu.printerapp.papercut.com
xerox.uk.printerapp.papercut.com
xerox.au.printerapp.papercut.com
Xerox LeSF 443 HTTPS United States
Europe
United Kingdom
Australia
lesf-connect.printerapp.papercut.com
lesf.eu.printerapp.papercut.com
lesf.uk.printerapp.papercut.com
lesf.au.printerapp.papercut.com

 

PaperCut Hive Lite Release App MFD firewall ports

MFD

Port

Protocol

Port direction

Brother

443

HTTPS

Outbound

Epson

443

HTTPS

Outbound

Fuji Xerox

443

HTTPS

Outbound

Konica Minolta

443

HTTPS

Outbound

Sharp OSA

443

HTTPS

Outbound

Toshiba

443

HTTPS

Outbound

Xerox

443

HTTPS

Outbound

PaperCut Hive Full Release App MFD firewall ports

MFD

Port

Protocol

Port direction

Canon

443

HTTPS

Outbound

Epson

443

HTTPS

Outbound

Fujifilm

443

HTTPS

Outbound

Fujifilm LeSF

443

HTTPS

Outbound

Fuji Xerox

443

HTTPS

Outbound and
Inbound*(from Edge Mesh to MFD)*

HP OXPd

443/7627

HTTPS

Outbound and
Inbound*(from Edge Mesh to MFD)*

Konica Minolta

443/50003

HTTPS

Outbound and
Inbound*(from Edge Mesh to MFD)*

Kyocera HyPAS

443

HTTPS

Outbound

Lexmark

443

HTTPS

Outbound

Ricoh SmartSDK

443

HTTPS

Outbound

Sharp OSA

443/6080-6089

HTTPS

Outbound and
Inbound*(from Edge Mesh to MFD)*

Sharp LeSF

443

HTTPS

Outbound

Toshiba MDS v3

443/49630/
50083 (or any customized port for scanning services)

HTTPS

Outbound and
Inbound*(from Edge Mesh to MFD)
Inbound
(from Edge Mesh to MFD)*

Toshiba LeSF

443

HTTPS

Outbound

Xerox

443

HTTPS

Outbound and
Inbound*(from Edge Mesh to MFD)
Inbound
(from Edge Mesh to MFD)*

Xerox LeSF

443

HTTPS

Outbound

Network traffic diagram

This diagram shows network traffic flowing around a PaperCut Hive or Pocket environment.

Network traffic flowing around a PaperCut Pocket or PaperCut Hive environment

You can download a copy of this diagram here.

Comments