# GET /v1/users/{user_id}/browser/cookies

> Which cookies of some names the user's browser holds for one site, and until when: names, sites and expiry only, never a value.

In [Computer setup API](https://vestra.ai/developers/reference/api/computer-setup.md): Wake a user's computer before they need it.

Send `Authorization: Bearer vk_test_...` on every call.

Which cookies of some names the user's browser holds for one site, and until when: names, sites and expiry only, never a value. Only a site on the deployment's browser.allowed_domains (403 domain_not_allowed). Opens no page and acts on nothing, so it never disturbs a person using the browser: read it every few seconds to see a person finish signing in on a page you handed them (front), as the site's session cookie appears or its expiry moves on. Wakes the computer when it sleeps.

Your API key, scope `runtime` or `all`. On the card: [`users`](https://vestra.ai/developers/users.md). Over HTTP it is made from the contract: fill in each {…} and every value.

## Request

Path:

- `user_id` (`string`, required): Your own id for the user, as you named them.

Query:

- `domain` (`string`, required): The site, a bare host name on the deployment's browser.allowed_domains, such as `ixigo.com`. Cookies of its subdomains count too.
- `names` (`string`, required): The cookie names to look for, comma-separated, up to 10.

## Answers 200

- `cookies` (`object[]`): The cookies of those names the browser holds for the site and its subdomains. Never a value. Empty when it holds none.
  - `name` (`string`): The cookie's name, one of those asked for.
  - `domain` (`string`): The host the cookie is set for, with no leading dot.
  - `expires_at` (`string | null`): When it expires, as an ISO 8601 time; null for a cookie that lasts only while the browser runs.
- `woke` (`boolean`): true when the computer was asleep and this call woke it.

## Code

**HTTP**

```bash
curl "$VESTRA_BASE_URL/v1/users/{user_id}/browser/cookies?domain=...&names=..." \
  -H "Authorization: Bearer $VESTRA_API_KEY"
```

**TypeScript, Python, CLI, MCP**: No sample in your language for this route, so here it is over HTTP.