{"slug": "how-i-gave-claude-cookie-tools-a-public-no-key-json-api", "title": "How I gave Claude cookie tools a public no-key JSON API", "summary": "A developer launched claudecookie.com, a browser-based toolset that converts Claude session cookies between formats such as cookies.txt, Cookie-Editor JSON, Puppeteer, and the ~/.claude/.credentials.json file Claude Code reads. The site exposes three of its utilities as public, keyless JSON APIs over HTTPS with CORS set to wildcard, including convert, check, and credential endpoints, with per-IP rate limits and a Retry-After header on 429 responses. The developer notes the project is not made by or endorsed by Anthropic and warns users to treat live session cookies like passwords.", "body_md": "If you use Claude Code, you have probably hit this wall: the browser stores your login as a `sessionKey` cookie, but Claude Code wants `~/.claude/.credentials.json`. Two different files, same login.\n\nI built [claudecookie.com](https://claudecookie.com) to bridge the gap. Three tools, one place:\n\n`cookies.txt`, Cookie-Editor JSON, Puppeteer format, key-value or a raw `Cookie` header into each other. Runs entirely in your browser; the paste never leaves your device.`~/.claude/.credentials.json` Claude Code actually reads.\nEvery one of those three exists as a public JSON API. No API key, CORS is `*`, everything over HTTPS:\n\n```\n# convert\ncurl https://claudecookie.com/api/v1/convert \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"input\":\"sessionKey=sk-ant-sid01-...\",\"target\":\"cookie-editor\"}'\n\n# check\ncurl https://claudecookie.com/api/v1/check \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"cookie\":\"sessionKey=sk-ant-sid01-...\"}'\n\n# credentials\ncurl https://claudecookie.com/api/v1/credential \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"cookie\":\"sessionKey=sk-ant-sid01-...\"}'\n```\n\nBatch check accepts up to 10 cookies in one request (`{\"cookies\": [\"...\", \"...\"]}`).\n\n| Route | Budget | \n|---|---|\n| All `/api/v1/*` | 10 req/s per IP (burst 20) | \n| `POST /convert` | 60/min per IP | \n| `POST /check` | 20/min per IP | \n| `POST /credential` | 5/min and 20/hour per IP; 3/hour per sessionKey | \n\nA `429` response carries a `Retry-After` header in seconds.\n\n`examples/curl.sh`, `examples/check.py`, `examples/convert.mjs`)\nIt does not log you out, and it does not rotate your cookie on purpose. Treat a live session cookie like a password: only paste a session you control.\n\nThe site also has Russian and Chinese versions. Not made by or endorsed by Anthropic.\n\nIf you end up using the API, tell me what is missing. The whole point of publishing it with no keys is that agents and scripts can just call it.", "url": "https://wpnews.pro/news/how-i-gave-claude-cookie-tools-a-public-no-key-json-api", "canonical_source": "https://dev.to/jakereinhold/how-i-gave-claude-cookie-tools-a-public-no-key-json-api-4anf", "published_at": "2026-09-19 23:21:41+00:00", "updated_at": "2026-09-19 23:54:30.972643+00:00", "lang": "en", "topics": ["ai-tools", "developer-tools", "ai-products"], "entities": ["Claude Code", "Anthropic", "claudecookie.com", "Puppeteer"], "alternates": {"html": "https://wpnews.pro/news/how-i-gave-claude-cookie-tools-a-public-no-key-json-api", "markdown": "https://wpnews.pro/news/how-i-gave-claude-cookie-tools-a-public-no-key-json-api.md", "text": "https://wpnews.pro/news/how-i-gave-claude-cookie-tools-a-public-no-key-json-api.txt", "jsonld": "https://wpnews.pro/news/how-i-gave-claude-cookie-tools-a-public-no-key-json-api.jsonld"}}