MCP Tool
nova.cookie_set
For sensitive browser, identity, or session data, an agent uses this public tool to handle the sensitive path "Cookie-Set dryRun". It keeps purpose, scope, user control, and sensitive data handling explicit.
Canonical reference for a public MCP tool name.
- Type
- MCP tool
- Family
- Site Data Management (Cookies, Storage, Cache)
- Effect
- sensitive
- Status
- Explained
- Path
- 52.6
Purpose
What this entry explains
What it does
nova.cookie_set
An agent uses this tool to handle the sensitive path "Cookie-Set dryRun". It belongs to sensitive browser, identity, or session data; agents should combine it with current discovery, target awareness, and the visible result.
Use when
- Use this entry when an agent needs to handle the sensitive path "Cookie-Set dryRun" for sensitive browser, identity, or session data.
- Use it to understand the public tool name, its expected boundary, and the response signals to check.
- Use it before chaining follow-up tools so the next step is based on current evidence.
Reference Use
How agents should cite and apply this area
Examples are maintained at family level and use only public tool names or reference paths already present in the catalog.
Family example
A task in sensitive browser, identity, or session data can trigger powerful execution and therefore needs target, approval, and result check before the step.
The agent starts with nova.tools_bundle, reads the current response or reference, and only then chooses the concrete next tool.
Current discovery, target, user control, warning signals, and result check come before execution.Contract
Inputs and important response fields
This page is a public reference. Agents and integrators should still read current MCP tool discovery before execution, because schemas can be gated by settings or version.
Inputs
targetId
Target reference for a tab or browser context. Confirm it against current tab state before use.
name
Name for the target object. Check uniqueness before creating or changing it.
value
Value for a field, variable, or setting. Use sensitive values only with clear scope.
domain
Domain or scope value for site-specific queries.
dryRun
Public input field from the catalog source. Confirm the exact schema through current MCP discovery before execution.
| Response field | Explanation |
|---|---|
wouldCreate | Response field named by the catalog source. Treat it as current evidence for the next decision. |
Safety
Boundary before execution
May touch sensitive data, permissions, credentials, identity, or external connection paths. Use only with explicit scope and visible user control.
Require explicit purpose and current context, avoid exposing secrets in prompts or logs, and stop when permission or identity state is unclear.
For humans, this entry marks the sensitive surface in sensitive browser, identity, or session data and keeps permission, credential, or external-connection handling explicit.
High-Impact Review
Execution boundary and recheck hints
Review category: Clipboard/site data/cookies/storage
Cookies, storage, cache, and clipboard stay limited to origin, purpose, and current user control.
False assumption: site data is only technical configuration and not user-related.
Origin, data kind, planned change, and expected effect must remain visible.
Do not guess, log, or reuse cookies, storage values, or clipboard contents across domains.
Stop if origin, value, delete effect, or target page does not clearly match the current task.
Safety Axes
How this path can affect work
Axes are stable catalog signals for humans, agents, and LLM discovery. One path can carry several axes.
persistent_change
Saves, deletes, remembers, schedules, or changes data that may outlive the immediate page state.
Execute only with clear scope and keep the saved, deleted, or scheduled effect reviewable.sensitive_data
Touches cookies, storage, clipboard, credentials, tokens, user content, identity, or private data.
Use only with bounded purpose and visible user control; do not guess, log, or forward sensitive values.high_impact_execution
Runs or prepares JavaScript, CDP, plugin code, auto-apply, or other powerful execution paths.
Explicitly confirm current tool discovery, target, scope, user control, and result check before execution.user_confirmation
Requires visible confirmation, target review, approval, or deliberate user control.
Do not proceed until the required confirmation is visible or unambiguous in the current context.