Practical overview
When it fits
Use it when an agent or browser automation runs on Linux, the human's Chrome session is on a Mac, and both machines can communicate over Tailscale.
Who it is for
- Developers running browser automation or AI agents on a Linux machine while browsing on a Mac.
- Operators who want eligible authenticated Chrome sessions available to automation through a connected Chromium instance.
Documented uses
- Keep eligible Chrome cookies on a Linux agent machine synchronized with changes made in Chrome on a Mac.
- Let CDP-connected browser automation access cookie-authenticated sites without repeating sign-in on the Linux machine.
Requirements & limits
The documented setup requires Tailscale and Chrome on both machines. The repository specifies an MIT license and provides release archives for macOS arm64 and Linux amd64 and arm64.
- The Linux Chrome instance must expose a CDP remote-debugging endpoint for live injection.
- Google and Workspace sessions are excluded unless a human signs in on the receiving machine.
- Cookie policy configuration controls which domains are synchronized.
- The README describes encrypted transfer over Tailscale using pairing-derived peer keys and AES-256-GCM.
Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.
Pair a Mac Chrome source with a Linux sink
Set up the documented Mac-to-Linux pairing and configure the Linux sink for live CDP cookie injection.
Before you start
- Tailscale running on both machines
- Chrome installed on both machines
- Linux Chrome started with a remote debugging port, documented as 9223
- Agentcookie installed on both machines
Steps
On the Mac, run
agentcookie wizard install --as source --peerand keep the terminal open to receive the pairing code and URL.On Linux, create
~/.config/agentcookie/sink.yamlwith the sink address, Mac Tailscale hostname,live_cdpenabled and the Chrome debug endpoint; setskip_chrome_sqlite: trueas shown in the README.Create
~/.config/agentcookie/blocklist.yamlwith the documented policy configuration for the trusted single-operator sync-all setup.On Linux, run
agentcookie pair --as sinkwith the Mac hostname and the code and URL printed by the source wizard.
Expected outcome
The paired Linux sink is configured to receive cookie updates and inject them into Chrome through CDP.
Guide limitations
- The README warns not to use
wizard install --as sinkfor the featured Linux setup because it omits the policy file. - Google and Workspace sessions remain logged out unless a human signs in on the Linux machine.
- The documented sync-all blocklist example is specifically for a trusted single-operator box.
Sources & review
Source record details
- Source availability
- Active
- Sources checked
- 13 October 2026
- Original website title
- mvanhorn/agentcookie · Official homepage title · retained in its source language

