onCookie

About

Send Browser Cookies Directly to Your API

onCookie lets you manage browser cookies and send them directly to your API — no downloads, no manual copy-paste.

Connect your endpoint once, and export cookies with a single click.

✨ Why onCookie?
- Most cookie managers force you to download a file and upload it somewhere else.
onCookie skips that entirely.
- Click “Send to API” and your cookies are delivered straight to your server as a structured JSON payload — including username, timestamps, and metadata.

🚀 Core Features
- Export to API (No Download Required)
- Connect any API endpoint in Settings
- Select domains and send cookies instantly via POST (JSON)
- Automatically attach username via XPath extraction or set manually
- Optional Bearer token authentication

🍪 Full Cookie Management
- View & Search → Find cookies by name, value, or domain
- Sort → Organize by any column
- Edit → Modify name, value, domain, path, expiry, SameSite, Secure, HttpOnly
- Delete → Remove individual cookies or bulk-delete by domain
- Domain Filter → Focus on specific domains

🔄 Import & Export
- Import cookies via JSON file or direct paste
- Preview before applying changes
- Select domains and overwrite behavior
- Export cookies as JSON when needed
- Quickly search and select domains

🧩 Side Panel Interface
- Runs in the browser side panel
- Stays open while you browse
- No annoying popups that disappear

📦 API Payload Format
{
  "version": "1.0",
  "timestamp": "ISO 8601",
  "username": "extracted or manual",
  "source": {
    "extensionId": "...",
    "extensionVersion": "...",
    "browser": "..."
  },
  "cookies": [
    {
      "domain": "...",
      "name": "...",
      "value": "...",
      "path": "...",
      "secure": true,
      "httpOnly": true,
      "sameSite": "...",
      "expirationDate": "..."
    }
  ]
}

No SDK required — just accept a JSON POST in any language or framework.

🔐 Security & Privacy
- API calls run in background service worker (never page context)
- HTTPS enforced (localhost allowed for development)
- Bearer tokens encrypted using AES-256-GCM
- No data sent to third parties
- No ads, tracking, or analytics
- Your cookies go only to your configured endpoint.

⚙️ Permissions Explained
- cookies → Read, write, and delete cookies
- activeTab → Extract usernames via XPath
- storage → Save settings and encrypted tokens
- sidePanel → Main interface
- Host access → Manage cookies across domains