#9658 iclouddrive with ADP fails with: Missing X-APPLE-WEBAUTH-TOKEN cookie

Before you start

I have searched the forum and the existing issues for this problem.
I have tested with the latest beta or stable release and can still reproduce the problem.
This is a reproducible bug, not a usage question (questions belong on the forum).

Associated forum post URL

No response

What is the problem you are having with rclone?

Configured iclouddrive remote on CLI, entered 2FA code that appeared on my trusted Mac desktop, so authentication appeared to complete successfully:

Configuration complete.
Options:
- type: iclouddrive
- apple_id: <email-address>
- password: *** ENCRYPTED ***
- description:
- _auth_session:
- cookies: dslang=US-EN; site=USA; aasp=XXX; acn01=XXX; DES5118d59c2e25b87b874ccbd8a832f3935=XXX; X-APPLE-WEBAUTH-HSA-TRUST=XXX; X-APPLE-UNIQUE-CLIENT-ID=XXX; X-APPLE-WEBAUTH-REPAIR=XXX; X-APPLE-WEBAUTH-USER=XXX; X_APPLE_WEB_KB-CCV8MODPH-I61XXUZMCMTCDXMDK=XXX
- trust_token: XXX
Keep this "id" remote?
y) Yes this is OK (default)
e) Edit this remote
d) Delete this remote
y/e/d> y

But I'm still unable to list the contents of my iCloud Drive:

$ rclone -vv lsd id:
2026/07/24 13:11:27 DEBUG : rclone: Version "v1.74.4" starting with parameters ["rclone" "-vv" "lsd" "id:"]
2026/07/24 13:11:27 DEBUG : Creating backend with remote "id:"
2026/07/24 13:11:27 DEBUG : Using config file from "/Users/erhhung/.config/rclone/rclone.conf"
2026/07/24 13:11:27 DEBUG : iclouddrive: authenticating
2026/07/24 13:11:28 DEBUG : iclouddrive: SRP sign in successful
2026/07/24 13:11:28 DEBUG : iclouddrive: ignoring empty auth cookie tombstone for missing cookie: X-APPLE-WEBAUTH-HSA-LOGIN,empty,len=0,path=/,domain=.icloud.com,expires
2026/07/24 13:11:28 DEBUG : iclouddrive: accountLogin response cookies: [X-APPLE-WEBAUTH-HSA-TRUST,set,len=269,hash=48be53606ec1,path=/,domain=.icloud.com,expires X-APPLE-WEBAUTH-HSA-LOGIN,empty,len=0,path=/,domain=.icloud.com,expires X-APPLE-UNIQUE-CLIENT-ID,set,len=4,hash=316c95fa9bc4,path=/,domain=.icloud.com X-APPLE-WEBAUTH-REPAIR,set,len=212,hash=e7c6fd965b8f,path=/,domain=.icloud.com,expires X-APPLE-WEBAUTH-USER,set,len=19,hash=1e271fc8d9dd,path=/,domain=.icloud.com,expires X_APPLE_WEB_KB-CCV8MODPH-I61XXUZMCMTCDXMDK,set,len=218,hash=5a5d1146c2f6,path=/,domain=.icloud.com,expires]
2026/07/24 13:11:28 DEBUG : iclouddrive: session cookie jar after accountLogin: [dslang,len=5,hash=a4713fb1f309 site,len=3,hash=aa5ab35a9174 aasp,len=240,hash=7e0da3da7030 acn01,len=44,hash=37fba1938610 X-APPLE-WEBAUTH-HSA-TRUST,len=269,hash=48be53606ec1 X-APPLE-UNIQUE-CLIENT-ID,len=4,hash=316c95fa9bc4 X-APPLE-WEBAUTH-REPAIR,len=212,hash=e7c6fd965b8f X-APPLE-WEBAUTH-USER,len=19,hash=1e271fc8d9dd X_APPLE_WEB_KB-CCV8MODPH-I61XXUZMCMTCDXMDK,len=218,hash=5a5d1146c2f6]
2026/07/24 13:11:28 DEBUG : Saving config "cookies" in section "id" of the config file
2026/07/24 13:11:28 DEBUG : iclouddrive: ADP detected, acquiring PCS cookies for iclouddrive
2026/07/24 13:11:28 NOTICE: iclouddrive: Advanced Data Protection enabled, requesting PCS cookies for iclouddrive
2026/07/24 13:11:28 DEBUG : iclouddrive: requestPCS(iclouddrive) outgoing cookies: [dslang,len=5,hash=a4713fb1f309 site,len=3,hash=aa5ab35a9174 aasp,len=240,hash=7e0da3da7030 acn01,len=44,hash=37fba1938610 X-APPLE-WEBAUTH-HSA-TRUST,len=269,hash=48be53606ec1 X-APPLE-UNIQUE-CLIENT-ID,len=4,hash=316c95fa9bc4 X-APPLE-WEBAUTH-REPAIR,len=212,hash=e7c6fd965b8f X-APPLE-WEBAUTH-USER,len=19,hash=1e271fc8d9dd X_APPLE_WEB_KB-CCV8MODPH-I61XXUZMCMTCDXMDK,len=218,hash=5a5d1146c2f6]
2026/07/24 13:11:28 CRITICAL: Failed to create file system for "id:": requestPCS(iclouddrive): HTTP error 500 (500 Internal Server Error) returned body: "{\"success\":false,\"error\":\"Missing X-APPLE-WEBAUTH-TOKEN cookie\"}"
Jul 24, 2026 at 1:15 PM

rclone version

rclone v1.74.4

os/version: darwin 15.7.7 (64 bit)
os/kernel: 24.6.0 (x86_64)
os/type: darwin
os/arch: amd64
go/version: go1.26.5
go/linking: dynamic
go/tags: none

Operating system

macOS

Which cloud storage system are you using?

iCloud Drive

Output of `rclone config redacted`

[id]
type = iclouddrive
apple_id = XXX
password = XXX
description =
_auth_session =
cookies = XXX
trust_token = XXX
### Double check the config for sensitive info before posting publicly

The command you were trying to run

rclone -vv lsd id:

A log from the command with the `-vv` flag

$ rclone -vv lsd id:
2026/07/24 13:35:13 DEBUG : rclone: Version "v1.74.4" starting with parameters ["rclone" "-vv" "lsd" "id:"]
2026/07/24 13:35:13 DEBUG : Creating backend with remote "id:"
2026/07/24 13:35:13 DEBUG : Using config file from "/Users/erhhung/.config/rclone/rclone.conf"
2026/07/24 13:35:13 DEBUG : iclouddrive: reusing session with cached endpoints
2026/07/24 13:35:13 DEBUG : iclouddrive: ADP detected, acquiring PCS cookies for iclouddrive
2026/07/24 13:35:13 NOTICE: iclouddrive: Advanced Data Protection enabled, requesting PCS cookies for iclouddrive
2026/07/24 13:35:13 DEBUG : iclouddrive: requestPCS(iclouddrive) outgoing cookies: [dslang,len=5,hash=a4713fb1f309 site,len=3,hash=aa5ab35a9174 aasp,len=240,hash=7e0da3da7030 acn01,len=44,hash=37fba1938610 X-APPLE-WEBAUTH-HSA-TRUST,len=269,hash=48be53606ec1 X-APPLE-UNIQUE-CLIENT-ID,len=4,hash=316c95fa9bc4 X-APPLE-WEBAUTH-REPAIR,len=212,hash=e7c6fd965b8f X-APPLE-WEBAUTH-USER,len=19,hash=1e271fc8d9dd X_APPLE_WEB_KB-CCV8MODPH-I61XXUZMCMTCDXMDK,len=218,hash=5a5d1146c2f6]
2026/07/24 13:35:13 CRITICAL: Failed to create file system for "id:": requestPCS(iclouddrive): HTTP error 500 (500 Internal Server Error) returned body: "{\"success\":false,\"error\":\"Missing X-APPLE-WEBAUTH-TOKEN cookie\"}"

Anything else?