It is not described in docs.mendix.com perhaps because Mendix does not want to hand this data all too easy to hackers.

There is the session-cookie and its purpose is authentication, having a csrf-token.

And some others, which you can see with any browser’s inspector.