Developer shares userscript to extract ChatGPT Account ID locally

On 2026-11-11 at 21:28, a V2EX user posted a self-written Tampermonkey userscript for extracting a ChatGPT Account ID locally in the browser. According to the post, the JSON returned by chatgpt.com/api/auth/session carries the current session's accessToken in plaintext at the bottom. Within its validity window, obtaining that field is described as equivalent to holding a full login session, allowing API calls or account actions without going through password and 2FA. The field that actually distinguishes account ownership, however, is account.id, a UUID-style Account ID that carries no credential information. The userscript issues a same-origin request to /api/auth/session inside the local browser and extracts only account.id, so that copying the full JSON manually does not drag the accessToken out along with it. The author also offered a lightweight alternative for one-off checks: after signing in to chatgpt.com, open the DevTools Console and run a single fetch('/api/auth/session') one-liner, which returns the Account ID without installing anything. The materials show no further developments after that initial post.