Cookey - Help Agents In

Cookey — Browser Sessions for Your Agents

Scan a QR code on your phone, log in on mobile, and your browser session lands encrypted and ready for Playwright and AI agents.

Cookey bridges the gap between mobile login and agent automation. When an AI agent or script needs a logged-in browser session, Cookey lets you handle authentication on your phone and securely deliver the result.

How it works:
1. Run the Cookey CLI on your computer to generate a QR code.
2. Scan the QR code with this app.
3. Log in to the target website in the built-in browser.
4. Your session is encrypted on-device and delivered as Playwright-compatible JSON — ready for your agent to use.

Key features:

- End-to-end encrypted: Session data is encrypted on your device before it ever leaves your phone. The relay server never sees plaintext.
- Zero registration: No accounts, no sign-ups, no device enrollment. The CLI generates its own key pair on first run.
- Built for automation: Outputs Playwright-compatible storageState JSON. Pipe it into any browser automation tool or AI agent.
- Self-hostable relay: The relay server is a single Docker image with memory-only storage and auto-expiring sessions. Host your own or use the public instance.
- Session refresh: Re-authenticate expiring sessions with push notification reminders — no need to repeat the QR scan flow.
- Open source: Every component — CLI, mobile app, and relay server — is open source and auditable.

Cookey captures cookies and localStorage only. It does not store passwords, autofill data, or any other sensitive browser state.

Note: WebAuthn, Passkeys, and FIDO2 security keys are not supported in the in-app browser due to Apple platform restrictions on WKWebView. Use alternative login methods such as password, SMS, or email link for sites that require these.