RedditapisRedditapis
Auth

Store a Reddit Session for Writes Without Cookies

Connect your Reddit session once, stored server-side and encrypted, then comment, post, vote and DM without sending cookies on every call. Free.

Connect your Reddit session once. After that, any write (comment, submit, vote, DM, profile) that sends no cookies of its own acts as the stored session. This is what lets an AI agent or MCP client write on your behalf without your cookies ever passing through its prompts or tool arguments.

  • Encrypted at rest. The cookies are encrypted with AES-256-GCM under a key held only by the API process, and stored against your account. The database never sees them in the clear.
  • Checked before storing. The cookies are tested against Reddit first; a logged-out session is refused instead of stored.
  • Your cookies always win. A call that sends any of reddit_session, loid or token_v2 itself uses the cookies it sent, never the stored session.
  • One per account, for every key on it. Connecting again replaces the stored session. Every API key on your account, including a key you give an app or an agent, can write as this Reddit account while it is stored. Delete it to stop that.
  • A logged-out session is retired. If a write fails and Reddit no longer accepts the stored session, its status turns dead and writes ask for cookies again until you reconnect.
  • Free. Connecting, checking and deleting cost nothing.

Connect

POST/api/reddit/sessionFree

Send the session cookies from POST /api/reddit/login, or from your own signed-in browser.

FieldTypeRequiredDescription
reddit_sessionstringYesThe reddit_session cookie
loidstringYesThe loid cookie
csrf_tokenstringNoStore it too if you will vote, DM or edit your profile: those writes need it
token_v2stringNoWhen your session has one
proxyobjectNoProxy for the one check against Reddit
curl -X POST https://api.redditapis.com/api/reddit/session \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{"reddit_session":"...","loid":"..."}'
{ "connected": true, "reddit_username": "your_account", "status": "active" }

A logged-out jar answers 400 with code SESSION_LOGGED_OUT.

Status

GET/api/reddit/sessionFree

What is stored for your account. Never returns the cookies.

{
  "connected": true,
  "reddit_username": "your_account",
  "status": "active",
  "created_at": "2026-10-20T07:00:00Z",
  "updated_at": "2026-10-20T07:00:00Z",
  "last_used_at": "2026-10-20T07:05:00Z"
}

{ "connected": false } when nothing is stored.

Delete

POST/api/reddit/session/deleteFree

Deletes the stored session, self-serve. Idempotent: 200 with deleted: false when nothing was stored.

{ "ok": true, "deleted": true, "message": "Your stored Reddit session is deleted." }

Writing with the stored session

Call any write without cookie fields:

curl -X POST https://api.redditapis.com/api/reddit/comment \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{"post_url":"https://www.reddit.com/r/test/comments/abc123/","text":"Hello"}'

If no session is stored, the write answers its usual 400 asking for cookies.

Independent third-party API for developers and researchers. Not affiliated with, endorsed by, or sponsored by Reddit, Inc.

On this page