Agent Cookie Lets AI Agents Stay Logged In Across Your Apps

Open-source, peer-to-peer cookie and token sync pairs two Macs so agents like OpenClaw and Hermes can stay authenticated for carts, orders, and API calls.

By ·

Why it matters

Agents that can click, buy, and call private APIs are only useful if they stay authenticated. A lightweight, peer-to-peer login and token sync removes a common failure point for Mac mini agent rigs, pushing real-world automation beyond toy demos.

The 'Agent Cookie' peer-to-peer authentication mechanism between two Mac computers for AI agents (Exploded-view technical diagram)

Matt Van Horn (@mvanhorn) introduced Agent Cookie, an open-source tool that keeps Mac-hosted AI agents logged in by syncing cookies, bearer tokens, and API keys between machines, in a thread on X. It targets setups running OpenClaw or NousResearch's Hermes on a Mac mini, where agents often lose sessions needed to shop, book, and fetch data across consumer services.

https://x.com/mvanhorn/status/2061259423197372566?s=20

Van Horn previously co-founded June, the smart-oven startup behind the June Intelligent Oven, and served as Vice President of Business at Path.com. That operating background sets the context for Agent Cookie's focus on practical, authenticated workflows like carts, orders, and API calls.

Van Horn showed a basic test: instructing the agent over Telegram to add avocados to Instacart and AirPods to Amazon. The agent completed both because the browser session was already synced. "It was already logged in. That's the whole point," he wrote on X. He added that bearer tokens and API keys ride the same encrypted sync, enabling authenticated API calls, and said it is built to work with Printing Press.

Agent Cookie pairs two Macs, Chrome to Chrome, with no cloud in the loop. "One command, both Macs, pair once. macOS, peer-to-peer, no cloud. Open source," Van Horn wrote. He argued Chrome's device-bound cookies (DBSC) do not block this on macOS, noting DBSC has shipped on Chrome for Windows and is largely used by Google; for Google services you sign the Mac mini in once, and other sessions sync.

The project is currently designed for Mac-to-Mac and Chrome-to-Chrome, and Van Horn said it works well alongside Printing Press and /Last30Days. Code and docs are live at agentcookie.dev and on GitHub.

Reader comments

Conversation for this story loads after sign-in.