# Import & export cookies

In this tutorial you will learn how to list, add, update, and delete cookies of a Kameleo browser profile using the Local API SDKs. This lets you preserve or reset authenticated sessions programmatically.

# Prerequisites

Completion of the Quickstart guide
Kameleo app running locally (http://localhost:5050)

Sensitive data

Cookies can contain session IDs, refresh tokens, or tracking data. Never store them unencrypted or commit them to source control. Limit file system permissions.

# 1. Create & start a profile, then gather cookies

Navigate a few high‑traffic sites to accumulate cookies, then stop the profile so you can manipulate them. Cookies can be listed, modified, or deleted only after the profile is terminated.

from kameleo.local_api_client.models import CreateProfileRequest, CookieRequest
from selenium import webdriver
import time, os

fingerprints = client.fingerprint.search_fingerprints(device_type='desktop', browser_product='firefox')
profile = client.profile.create_profile(CreateProfileRequest(fingerprint_id=fingerprints[0].id, name='cookie tutorial'))

opts = webdriver.ChromeOptions()
opts.add_experimental_option('kameleo:profileId', profile.id)
driver = webdriver.Remote(command_executor=f"http://localhost:{os.getenv('KAMELEO_PORT', '5050')}/webdriver", options=opts)

for url in ['https://www.nytimes.com', 'https://whoer.net', 'https://www.youtube.com']:
    driver.get(url)
    time.sleep(5)

client.profile.stop_profile(profile.id)

import { Builder } from "selenium-webdriver";

const fingerprints = await client.fingerprint.searchFingerprints("desktop", undefined, "firefox");
const profile = await client.profile.createProfile({ fingerprintId: fingerprints[0].id, name: "cookie tutorial" });

const webdriver = await new Builder()
    .usingServer(`http://localhost:5050/webdriver`)
    .withCapabilities({ "kameleo:profileId": profile.id, browserName: "Kameleo" })
    .build();

for (const url of ["https://www.nytimes.com", "https://whoer.net", "https://www.youtube.com"]) {
    await webdriver.get(url);
    await webdriver.sleep(5000);
}

await client.profile.stopProfile(profile.id);

using System;
using System.Collections.Generic;
using System.Threading.Tasks;
using Kameleo.LocalApiClient.Model;
using OpenQA.Selenium.Firefox;
using OpenQA.Selenium.Remote;

var fps = await client.Fingerprint.SearchFingerprintsAsync(deviceType: "desktop", browserProduct: "firefox");
var profile = await client.Profile.CreateProfileAsync(new CreateProfileRequest(fps[0].Id) { Name = "cookie tutorial" });

var wdUri = new Uri("http://localhost:5050/webdriver");
var opts = new FirefoxOptions();
opts.AddAdditionalOption("kameleo:profileId", profile.Id.ToString());
var driver = new RemoteWebDriver(wdUri, opts);

foreach (var url in new[] { "https://www.nytimes.com", "https://whoer.net", "https://www.youtube.com" }) {
    await driver.Navigate().GoToUrlAsync(url); await Task.Delay(5000);
}

await client.Profile.StopProfileAsync(profile.Id);

# 2. List cookies

Listing lets you choose which cookie to update or duplicate.

cookie_list = client.cookie.list_cookies(profile.id)
for c in cookie_list[:5]:
  print(c.domain, c.name, c.value[:20])

const cookieList = await client.cookie.listCookies(profile.id);
cookieList.slice(0, 5).forEach((c) => console.log(c.domain, c.name, c.value.substring(0, 20)));

var cookieList = await client.Cookie.ListCookiesAsync(profile.Id);
var limit = Math.Min(5, cookieList.Count);
for (var i = 0; i < limit; i++)
{
  var c = cookieList[i];
  var preview = c.Value.Length > 20 ? c.Value.Substring(0, 20) : c.Value;
  Console.WriteLine($"{c.Domain} {c.Name} {preview}");
}

Ensure domain/path match the target site you will later visit; secure/httponly/samesite settings should reflect the intended usage.

new_cookie = CookieRequest(
    domain='.example.com', name='custom_flag', value='enabled', path='/', secure=True,
    http_only=False, host_only=False, same_site='Lax'
)
client.cookie.add_cookies(profile.id, [new_cookie])
print('Added new cookie custom_flag')

const newCookie = {
    domain: ".example.com",
    name: "custom_flag",
    value: "enabled",
    path: "/",
    secure: true,
    httpOnly: false,
    hostOnly: false,
    sameSite: "Lax",
};
await client.cookie.addCookies(profile.id, [newCookie]);
console.log("Added new cookie custom_flag");

var addCookie = new CookieRequest(domain: ".example.com", name: "custom_flag", path: "/", value: "enabled")
{
    Secure = true,
    HttpOnly = false,
    HostOnly = false,
    SameSite = "Lax"
};
await client.Cookie.AddCookiesAsync(profile.Id, new List<CookieRequest> { addCookie });
Console.WriteLine("Added new cookie custom_flag");

Select a cookie, modify its value, and re-add it via the same add API (it overwrites by name+domain+path).

original = cookie_list[0]
updated = CookieRequest(domain=original.domain, name=original.name, path=original.path, value='123',
                        host_only=original.host_only, http_only=original.http_only, secure=original.secure,
                        same_site=original.same_site, expiration_date=original.expiration_date)
client.cookie.add_cookies(profile.id, [updated])
print(f'Updated cookie {original.name} -> 123')

const toUpdate = { ...cookieList[0] };
toUpdate.value = "123";
await client.cookie.addCookies(profile.id, [toUpdate]);
console.log(`Updated cookie ${toUpdate.name} -> 123`);

var toUpdate = cookieList[0];
toUpdate.Value = "123";
var updateReq = new CookieRequest(toUpdate);
await client.Cookie.AddCookiesAsync(profile.Id, new List<CookieRequest> { updateReq });
Console.WriteLine($"Updated cookie {toUpdate.Name} -> 123");

# 5. Delete all cookies

Use this to force a full logout / session reset while keeping other profile state (extensions, local storage, etc.).

client.cookie.delete_cookies(profile.id)
print('Deleted all cookies')

await client.cookie.deleteCookies(profile.id);
console.log("Deleted all cookies");

await client.Cookie.DeleteCookiesAsync(profile.Id);
Console.WriteLine("Deleted all cookies");

# 6. (Optional) Restart to verify

Start the profile again and inspect cookies in DevTools or list them once more via the API; added values should appear (unless domain mismatch) and deletions should persist.