getting started

Quick tour

A two-minute walk through the SessionCourier side panel — cookie list, search, editor, exports, and the session recorder.

When you open SessionCourier, the side panel shows the cookies for the site in your active tab — the common case when you’re debugging the page in front of you. You can also switch to a view of all cookies across every domain the browser has stored, for when you need to hunt something down.

It works against the cookie store of a real, long-lived browser profile, not just a clean test one — the search box below narrows a long list to the cookie you’re after.

Search and filter

A single search box narrows the list as you type. Matching runs across the cookie name, its domain, and its value, so you can find a cookie whether you remember what it’s called, where it lives, or a fragment of what it contains. Details of every attribute you can then change are in create, edit and delete cookies.

Select any cookie to inspect and change every attribute it has: value, domain, path, expiry, and the Secure, HttpOnly and SameSite flags. Changes apply to the live browser cookie immediately — there is no separate save-and-sync step. The full workflow, including creating a cookie from scratch and deleting one, is covered in create, edit and delete cookies.

Exports

One export menu offers four formats, each aimed at a different tool:

JSON — full-fidelity round-trip between browsers (see import and export cookies).
Netscape cookies.txt — the format curl, wget and yt-dlp read.
curl command — a ready-to-run curl … -H 'Cookie: …' line that replays the session against the site.
Playwright storageState — a storageState.json your Playwright and Puppeteer tests can reuse.

The Playwright path is the one most people come for — see the storageState export guide. The exact shape of every format is documented in the export formats reference.

JWT badges

Any cookie whose value looks like a JSON Web Token is flagged with a JWT badge in the list. Open that cookie and SessionCourier decodes the token’s header and payload inline in the editor — nothing leaves your browser. See decode JWTs inline.

Session recorder

The header carries an icon-only Session recorder toggle. Click it, run a login, logout or checkout in the page, and the side panel fills in — live, while the flow runs — with what the site did to its cookies: Added, Changed, Removed, and Transient for the ones it set and cleared again during the flow, which a before/after comparison can never see. “Changed” covers the value, the expiry and the Secure, HttpOnly and SameSite flags, so a login that only refreshes a session shows up too.

Recording happens in the background, so it survives tab switches; the capture is held in memory only and is gone when the browser closes. Full walkthrough and limits: record what a login flow changes.

On the roadmap

A few things aren’t in the extension yet: named per-domain profiles, encrypted sync, and a CI-side CLI/API. These are the planned paid tier — nothing in today’s free extension is gated behind it. Join the waitlist to hear when they ship.