Skip to main content
MCP Tools

Sessions & credentials

Inspect saved identities and open tabs, refresh or re-auth sessions, and store sign-in secrets off the LLM path.

These tools introspect and maintain the saved browser identities and the credentials that back them. See the narrative guides for Sessions and Credentials.

Introspection

ToolWhat it does
bureau_sessionsList the browser identities saved on this Bureau (id, backend, platform, account, source strategy, resolved sub-account, declared domains, Chrome profile, last auth status + when verified, whether a re-login credential is on file). Metadata only — no cookies or credentials. Pass verify: true for a live auth probe per session (slower).
bureau_tabsList the tabs currently open (session, url, title). Pass session to scope to one identity; omit it to sweep every saved session plus the ad-hoc control tab. Only live sessions return tabs.
list_profile_accountsList the platform accounts a Chrome profile is logged into. Read-only + secret-free — account ids/handles only, never a cookie or credential.

Maintenance

ToolWhat it does
session_sync_from_chromeRefresh a chrome-sourced session: re-pull + re-decrypt its declared domains' cookies from the named/pinned Chrome profile, optionally re-pin to a different profile, and stamp the refresh time. Secret-free. Owned/Guilde sessions return no-chrome-strategy — use session_reauth.
session_reauthRe-authenticate a saved owned session from its stored credential (resolved server-side from env → Keychain, typed into the page — never passed in or returned). On a 2FA/challenge, returns needsHuman: true with the headful CLI command to finish by hand. Refuses when no credential is on file.

Credentials

ToolWhat it does
record_credentialInitiate storing a platform sign-in secret off the LLM path. via: "command" (default) returns the exact terminal command; via: "page" opens a one-shot loopback capture form on the host. Either way the human types the password and it goes straight to the OS Keychain — never an argument here, never returned.
list_credentialsList the (platform, account) sign-in credentials stored and which saved sessions each is linked to. Never returns the secret — only that a credential exists.