---
title: "Refresh the control-plane browser cookie"
method: POST
path: "/agent/v1/control-plane/session/browser/refresh"
tags: ["ControlPlane"]
---

# Refresh the control-plane browser cookie

`POST /agent/v1/control-plane/session/browser/refresh`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/agent/v1/control-plane/session/browser/refresh`
- Auth: API key in cookie `__Host-Http-r402_cp_session`

Rotates the opaque cookie handle and backing session generation. Requires the configured console Origin or Referer. No bearer is returned.

## Response `200`

Browser cookie rotated; metadata returned

- ControlPlaneBrowserSession
  - `session_transport` 'cookie', required
  - `principal_id` string, uuid, required
  - `expires_at` string, date-time, required
  - `absolute_expires_at` string, date-time, required
  - `amr` string[], required

## Other responses

- `401`: Cookie session expired or revoked
- `403`: Browser origin does not match

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)