# get_cookies

Get cookies for the current page or specified tab via the Chrome extension bridge.

Agent View of the PolicyLayer registry record for `get_cookies`. HTML page: https://policylayer.com/tools/335234131-agent-browser-mcp/get-cookies

## Facts

- Tool: `get_cookies`
- Server: Agent Browser (`335234131/agent-browser-mcp`) — https://policylayer.com/tools/335234131-agent-browser-mcp.md
- Homepage: https://github.com/335234131/agent-browser-mcp
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_cookies",
    "arguments": {}
  }
}
```

## Why get_cookies is rated Low

This tool retrieves cookie data from the browser—a read-only operation with no side effects on the system. However, severity is elevated to 'high' because cookies often contain sensitive authentication tokens, session identifiers, and personal data that could enable account compromise, session hijacking, or privacy violations if exfiltrated by a compromised agent.

From the tool's own definition: "Tool name 'get_cookies' and description 'Get cookies for the current page or specified tab' indicate retrieval of data with no modification. The word 'Get' confirms query-only semantics."

## Use case

AI agents call get_cookies to retrieve information from Agent Browser without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Agent Browser:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_cookies": {}
  }
}
```

## Other tools on Agent Browser (19)

- `cdp_batch` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/cdp-batch.md
- `cdp_command` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/cdp-command.md
- `execute_js` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/execute-js.md
- `hotkey` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/hotkey.md
- `mouse_click` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/mouse-click.md
- `mouse_drag` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/mouse-drag.md
- `mouse_move` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/mouse-move.md
- `open_new_tab` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/open-new-tab.md
- `open_url` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/open-url.md
- `switch_tab` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/switch-tab.md
- `type_text` — Execute — https://policylayer.com/tools/335234131-agent-browser-mcp/type-text.md
- `capture_desktop_screenshot` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/capture-desktop-screenshot.md
- `capture_page_screenshot` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/capture-page-screenshot.md
- `extension_path` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/extension-path.md
- `get_setup_status` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/get-setup-status.md
- `list_extensions` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/list-extensions.md
- `list_tabs` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/list-tabs.md
- `pointer_info` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/pointer-info.md
- `scan_page` — Read — https://policylayer.com/tools/335234131-agent-browser-mcp/scan-page.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=335234131-agent-browser-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/335234131-agent-browser-mcp