---
title: "Import browser cookies as kept sessions"
method: POST
path: "/api/v1/cookies"
tags: ["Account"]
---

# Import browser cookies as kept sessions

`POST /api/v1/cookies`

## Request

- Base URL: `https://unbrowse.ai`
- URL: `https://unbrowse.ai/api/v1/cookies`
- Auth: one of:
  - OAuth 2 (authorization code, authorization URL `https://unbrowse.ai/authorize`, token URL `https://unbrowse.ai/oauth/token`, scopes: `unbrowse`)
  - HTTP bearer

Takes cookies exported from the user's own browser (the CLI's `unbrowse cookies sync`, or the browser extension's sync) and keeps them as a signed-in session per site, sealed in the vault, so later runs act as the signed-in user. Values are stored, never returned.

## Request body

- object
  - `source` 'extension' | 'cli': Where the cookies came from; recorded on the site's session.
  - `cookies` object[], required
    - `domain` string, required: The cookie's domain, e.g. .example.com
    - `name` string, required
    - `value` string, required
    - `path` string
    - `secure` boolean
    - `httpOnly` boolean
    - `expires` integer: Unix seconds; 0 = session cookie.

## Response `200`

How many sites and cookies were kept

- object
  - `sites` integer
  - `cookies` integer
  - `origins` Object[]

## Other responses

- `400`: An error
- `401`: Missing or invalid credentials. The WWW-Authenticate header names the protected-resource metadata.
- `402`: An error
- `404`: An error
- `429`: An error

---

[API](https://skmtc.dev/unbrowse/apis/unbrowse-api.md) · [All operations](https://skmtc.dev/unbrowse/apis/unbrowse-api/llms.txt) · [OpenAPI document](https://skmtc.dev/unbrowse/apis/unbrowse-api/revisions/f49034a1fbff?raw)