Twitch Auth Token Sync

Name: Twitch Auth Token Sync
Author: Clay Freeman

A WebExtension designed to exfiltrate the 'auth-token' cookie value from Twitch whenever it changes.

As of June 2026, Twitch Auth Token Sync has 7 users in the Developer Tools category.

Clay Freeman Developer Tools

Chrome Web Store ↗.crx

Users−22.2%

Rating0%

—

— reviews

Reviews0%

—

Version

1.0.1

Manifest V3

History

4 snapshots

Tracking since Apr 1, 2026.

View as table

Date	Users	Rating	Reviews	Version
Apr 1, 2026	9	—	—	1.0.1
Apr 21, 2026	6	—	—	1.0.1
May 11, 2026	6	—	—	1.0.1
Jun 6, 2026	6	—	—	1.0.1
Now	7	—	—	1.0.1

Permissions & access

Permissions: cookiesstorage
Host access: <all_urls>

Screenshots

About

Once installed, click the extension in the browser toolbar to configure the following settings:

1. Destination: The destination *must* be a URL capable of receiving Twitch EventSub-style webhook callback notifications[1]. This is where the extension will send notifications.
2. Encryption Key: You must provide an encryption key used to encrypt the 'auth-token' cookie value. This key can be any arbitrary value of your choice, and will be used later to decrypt the cookie value.
3. Signing Key: You must provide a 'secret' value used to sign notifications. This value must be the same value used by your webhook callback for signature verification[2] to succeed.

You can force the extension to send a notification by changing any one of its setting values.

The extension will not send notifications unless all of its settings have been configured.

For more information about how to use this extension, visit the extension homepage[3].

[1]: https://dev.twitch.tv/docs/eventsub/handling-webhook-events/#processing-an-event
[2]: https://dev.twitch.tv/docs/eventsub/handling-webhook-events/#verifying-the-event-message
[3]: https://github.com/clayfreeman/twitch-auth-token-sync