---
title: "Browser-only short-lived CSRF session"
method: GET
path: "/remote/session"
---

# Browser-only short-lived CSRF session

`GET /remote/session`

## Request

- Base URL: `https://api.aifra.ru`
- URL: `https://api.aifra.ru/remote/session`
- Auth: none declared

Same-origin approval UI only. Sets host-only HttpOnly SameSite=Strict cookie (Secure in production). Not an agent tool.

## Response `200`

CSRF nonce; no-store

---

[API](https://skmtc.dev/aifra/apis/aifra-preview-api.md) · [All operations](https://skmtc.dev/aifra/apis/aifra-preview-api/llms.txt) · [OpenAPI document](https://skmtc.dev/aifra/apis/aifra-preview-api/revisions/276597d5361a?raw)