mvanhorn/agentcookie — Your agent runs on a Mac that isn't your daily driver.

Description and use

**Brief Summary**
agentcookie is a Go‑based, peer‑to‑peer utility that synchronises authentication sessions from a primary macOS workstation to secondary “agent” Macs over an encrypted Tailscale mesh. By keeping cookies and tokens in sync, it lets any agent runtime (e.g., OpenClaw, Hermes) start up already authenticated, eliminating the manual copy‑paste of credentials and removing the need for a cloud‑based broker.

**Value**

• **Automation of repetitive log‑ins** – developers and ops teams no longer have to manually export/import session cookies each time an auxiliary Mac is used.
• **Secure, zero‑trust connectivity** – Tailscale provides end‑to‑end encryption and device‑level access controls, so session data never traverses the public internet unprotected.
• **Tool‑agnostic** – works with any agent that can read a cookie file or API token, making it easy to stitch together custom workflows (e.g., CI runners, remote debugging, scheduled maintenance scripts).

**Practical Adoption Path**

1. **Install Tailscale** on both the “browse” Mac (source of truth) and the agent Mac(s).
2. **Deploy agentcookie** (binary or Homebrew) on each machine; configure it with the Tailscale node IDs of the peers it should sync with.
3. **Define sync rules** via the provided CLI/SDK (e.g., agentcookie sync --path ~/Library/Cookies/...).
4. **Integrate** the generated cookie location into your agent runtime’s startup script or configuration file.
5. **Test** by launching the agent on the secondary Mac; it should inherit the active session without manual intervention.

**Production‑Readiness**

• **Activity & Community** – 540 ⭐, 41 forks, recent commits (as of 2026‑06‑23) and a healthy set of Go contributors indicate active maintenance.
• **Security Posture** – Uses Tailscale’s WireGuard‑based mesh, keeping data encrypted in‑flight; no external cloud service stores credentials.
• **Ease of Evaluation** – Exposes a clear CLI/API, language‑agnostic metadata, and concise documentation, making pilot testing straightforward.
• **Risk Considerations** – License compliance, long‑term maintainer commitment, and a formal security audit should be confirmed before full production rollout, but the current signals suggest the project is ready for serious pilots in environments that already rely on Tailscale.

Problem

mvanhorn/agentcookie helps remove repetitive manual operations from a workflow.

Outcome

High for an OSS candidate: recent activity, adoption, and ecosystem signals are strong enough for a serious pilot.

Workflow

• remove manual work
• connect tools into repeatable flows
• schedule operational tasks

Evidence

Your agent runs on a Mac that isn't your daily driver. agentcookie keeps its sessions in sync with the Mac you actually browse on, continuously, encrypted over Tailscale, so OpenClaw, Hermes, or any other agent runtime wakes up authenticated. macOS, peer-to-peer, no cloud middleman.

Source