mvanhorn/agentcookie

Registry

Summary

agentcookie is a peer-to-peer macOS tool that continuously syncs browser sessions from your daily Mac to a secondary Mac running AI agents like OpenClaw or Hermes, using Tailscale for encrypted transport with no cloud dependency.

Key features

• Continuous session sync from daily Mac to agent Mac
• Encrypted peer-to-peer transport over Tailscale
• No cloud middleman – fully offline-capable
• Supports OpenClaw, Hermes, and other agent runtimes
• Built with Go for lightweight CLI operation
• macOS-native, no additional server infrastructure

Use cases

• Keep AI agents authenticated on a dedicated Mac
• Sync cookies for automated browser tasks
• Run headless agents without daily browser interruption
• Enable secure agent automation across multiple Macs
• Maintain persistent sessions for CLI-based AI workflows

README excerpt

# agentcookie Your agent runs on a Mac that isn't your daily driver. It needs to act as you on every site you're already logged into and against every API you've already authenticated. agentcookie keeps your second Mac's session state (Chrome cookies, per-CLI bearer tokens, API keys, and the auth blobs your tools persist next to them) in sync with your first Mac's, continuously, encrypted over your Tailscale tailnet, with zero per-site auth ceremony. OpenClaw, Hermes, or any other agent runtime you point at the second Mac wakes up authenticated, on the web and in the terminal. ## What it looks like You browse normally on your first Mac. agentcookie watches Chrome's Cookies file (and a parallel per-CLI secrets bus) and ships the diff to your second Mac the moment anything changes. On the second Mac, an agent does its work: ``` $ ssh second-mac 'instacart-pp-cli carts' Costco slug=costco cart=757109404 items=5 Safeway slug=safeway cart=3190 items=1 $ ssh second-mac 'ebay-pp-cli auctions "watch" --has-bids --ending-within 1h' 12 active auctions: $352 23 bids 1m Apple Watch Ultra 2 49mm Titanium ... $115 26 bids 1m Gucci 5500M Steel Quartz ... ... $ ssh second-mac 'table-reservation-goat-pp-cli goat "omakase" --location seattle' { "results": [ { "name": "Omakase Dinner Series", "network": "tock", ... } ] } ``` No `auth login`. No Keychain prompt. No paste-the-cookie ritual. No re-entering API keys you already configured on your laptop. The agent's sessions were already there when the request hit. The same is true for browser-driving agents and for any unmodified cookie tool. On a universal sink (the default), agentcookie writes your real Default Chrome profile and opens its Safe Storage key with a single

Topics