agentcookie: developer tool for Hermes Agent

Syncs your Mac's Chrome sessions to the Linux box your agent runs on, over Tailscale

What agentcookie does

agentcookie watches Chrome's Cookies file on the Mac and ships each change to a Linux sink, so an agent acts with the sessions you already have instead of logging in again on each site. Traffic is encrypted with AES-256-GCM over the Tailscale tailnet's WireGuard channel, using pairing-derived per-peer keys, and cookie policy filters run on both sides.

On the Linux side, the sink injects cookies into Chrome's in-memory store through the Chrome DevTools Protocol, so Chrome there must be started with --remote-debugging-port=9223 or another configured port. Automation such as browserUse, Puppeteer or Playwright that connects to the debug port sees the synced sessions. Google and Workspace sessions stay logged out unless a human signed in on the Linux box. The design is peer to peer, with no cloud middleman.

Key features

One-way, continuous, unattended cookie replication from Mac to Linux
AES-256-GCM encryption over Tailscale with pairing-derived per-peer keys
Cookie policy filters on both the source and the sink
Live injection through the Chrome DevTools Protocol with no Chrome SQLite rewrite
Release binaries for macOS arm64, Linux amd64 and Linux arm64
Peer-to-peer design with no cloud middleman

When to use it

Letting an agent on a homelab server use sites you are already logged into
Running browser automation on a cloud agent runtime with your sessions available
Avoiding repeated per-site logins on the machine where agents run

Who it is for: People who run agents on a Linux box and want them to reuse the browser sessions from their own Mac.

How it fits with Hermes Agent

The repository description names Hermes alongside OpenClaw and any other agent runtime that can use the synced sessions. It is a general tool and is not built only for Hermes Agent.

How to install agentcookie

These commands are copied from the project's README. Check the repository for the latest steps before you run them.

curl -LO https://github.com/mvanhorn/agentcookie/releases/download/v1.0.0/agentcookie_1.0.0_darwin_arm64.tar.gz
tar -xzf agentcookie_1.0.0_darwin_arm64.tar.gz
sudo mv agentcookie /usr/local/bin/

Requirements: A Mac running Chrome as the source, a Linux machine running Chrome with a remote debugging port as the sink, and a Tailscale tailnet connecting them

Note: Google and Workspace sessions stay logged out on the Linux box unless a human signs in there, because those sessions are bound to device keys.

FAQ

What is agentcookie?

agentcookie is a tool that keeps a Linux machine's Chrome session in sync with your Mac's Chrome, continuously and encrypted over Tailscale. It lets an agent on the Linux machine reuse sites you are already logged into.

Does agentcookie work with Hermes Agent?

The repository description names Hermes and OpenClaw as agent runtimes that can wake up authenticated, along with any other runtime. The agent needs to drive Chrome through its debug port, as browserUse, Puppeteer and Playwright can.

What do I need to run agentcookie?

You need a Mac running Chrome as the source, a Linux machine running Chrome started with a remote debugging port as the sink, and a Tailscale tailnet connecting them. The README provides release binaries for macOS arm64, Linux amd64 and Linux arm64.