{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "poke", "name": "Poke", "vendor": "The Interaction Company of California Inc.", "vendorUrl": "https://poke.com", "kind": "platform", "category": "personal-assistants", "summary": "Hosted personal assistant from The Interaction Company of California, reached by text on Apple Messages, WhatsApp, Telegram and RCS. It works across the owner's Gmail or Outlook mail, calendar, contacts and connected apps.", "url": "https://www.anchorterminal.com/tools/poke", "markdownUrl": "https://www.anchorterminal.com/tools/poke.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/poke.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/poke.json", "license": "Proprietary service under Poke's Terms of Service. The `poke` npm package (CLI and Node.js SDK) declares MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "poke" } ], "auth": "api-key", "authNotes": "A person signs up at poke.com and connects a Google or Microsoft account. The Poke API takes `Authorization: Bearer \u003ckey\u003e` with a V2 key created in Kitchen under API Keys. Keys are named, shown once, revocable one at a time and have no scopes. Older `pk_` keys work only on the deprecated endpoint. The CLI signs in with a browser device code and stores credentials in `~/.config/poke/credentials.json`. Third-party MCP servers are connected with an API key or OAuth (https://poke.com/docs/api; https://poke.com/docs/mcp-servers; https://poke.com/docs/creating-recipes).", "pricing": "freemium", "pricingNotes": "Free at $0 with no card. Pro is $19 a month and Ultra $199 a month on monthly billing. Free and Pro have a refilling usage allowance, with no figures published, and Poke continues in a lighter mode past it. Ultra includes a monthly credit pool (1 credit is $1 of usage), with top-ups and optional auto-reload. Poke Human is included with Ultra, with real-world expenses charged at cost. Model usage is not billed separately (https://poke.com/pricing; https://poke.com/docs/usage-and-resets; https://poke.com/faq, checked 2026-10-12).", "priceSummary": "$19 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt or the pricing page (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://poke.com/docs", "llmsTxt": "https://poke.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "agent.mcp-client" ], "tags": [ "hosted", "closed-source", "messaging", "imessage", "whatsapp", "telegram", "gmail", "outlook", "mcp-client", "api-key", "free-tier", "status-page", "llms-txt", "trains-on-data-by-default" ], "lastRelease": "2026-06-25", "graded": true, "anchor": { "graded": true, "score": 37.6, "grade": "F", "agentReady": false, "rank": 955, "ranked": true, "rankOf": 986, "categoryRank": 15, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 30, "maintenance": 31, "payments": 30, "reliability": 51, "schema": 42, "security": 24, "transparency": 58 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 51, "points": 10.2, "reason": "Read as a hosted service. status.poke.com is an incident.io page with components for App, Email, Integrations, iMessage, WhatsApp, SMS and API, and a history view (20). Two incidents from July to 12 October 2026. On 22 July iMessage had a 42-minute partial outage attributed to an upstream provider. An issue with Poke Sites, marked degraded performance on App, stayed open from 15 to 29 September and closed with the note \"fixed it\". No core outage of an hour or more, but one incident open for two weeks (18 of 30). The API page has a rate limits heading with no numbers (0). It advises batching and delays, with no `Retry-After`, backoff figures or idempotency key (3 of 15). No SLA found (0). The release notes of 19 March 2026 call Poke generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 42, "points": 6.83, "reason": "Graded on the Poke API, the one documented interface an outside program can call. No OpenAPI file or other machine-readable contract was found (0). poke.com/llms.txt lists seven docs pages (10). The API page states the purpose, four use cases and what happens after a message arrives (12 of 20). The body is any JSON object, forwarded whole to the assistant, with `message` shown by convention and no types or constraints (2 of 15). Examples in curl, Python and JavaScript, a response sample, and one documented error, 401 (9 of 15). The path carries `v1`. The page marks the older `/api/v1/inbound-sms/webhook` deprecated with no date. Release notes are public and have covered major updates only since March 2026 (9 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 30, "points": 4.88, "reason": "Graded on the Poke API and the `poke` npm package. A call returns a two-field acknowledgement and the assistant's answer goes to the owner's message thread, so a calling agent cannot read the result (10 of 25). No endpoint reads conversations, memories or integrations, so there is nothing to page or filter (3 of 20). Errors documented are 401 and a `success` boolean (6 of 20). No idempotency key or retry guidance, and a repeated POST is a second instruction (2 of 20). One endpoint and one conventional field. One official SDK, for Node.js, which also creates webhook triggers (9 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 24, "points": 4.2, "reason": "API keys are named, created in Kitchen, shown once and revoked individually, with no scopes or expiry (20). We took 5 off, half the checklist's deduction, because the docs give a prefilled link that carries a third-party MCP server's key as `apiKey` in the query string. The secret is not Poke's own key, so not the full 10 (15 of 30). A message sent with a key is processed with full access to email, calendar and integrations. No read-only mode or approval setting is documented. Release notes mention email draft approval and attachment preview before sending, without describing a control (4 of 20). Poke reads mail, web pages and MCP tool output, and no prompt-injection guidance was found (0 of 15). API messages appear in the conversation, and MCP servers receive `X-Poke-User-Id`. No audit log is documented (3 of 15). security.txt answers 404, and no disclosure policy, bounty or certification was found on poke.com. The privacy notice commits to Google's Limited Use requirements (2 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 in the docs, llms.txt or pricing page (0). Plan prices are public, $0, $19 and $199 a month, and Ultra credits are $1 each. Allowances are not given in numbers and nothing is priced per call (10). The Free plan needs no card (20). A person signs up with a phone number or email and creates the key in a browser (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 31, "points": 2.71, "reason": "The newest product entry in the release notes is Poke Human on 25 June 2026, 109 days before the check (10 of 30). The entry of 23 July 2026 announces the move to Cognition and changes nothing in the product. Counting it would give 20. One dated entry in the last 90 days (0). A public changelog, a support address, a Discord server and a status page whose incidents close with one-line notes (8 of 15). The `poke` npm package, a CLI and Node.js SDK, reached 4.0.461 on 23 August 2026 through GitHub Actions trusted publishing, the only official SDK (8 of 15). The package declares no dependencies and links no repository (5 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 58, "points": 5.08, "note": "editorial 34, provenance 81", "reason": "Closed service with published Terms of Service, last modified 17 March 2026, naming The Interaction Company of California d/b/a Poke (15 of 30). The privacy notice of 11 September 2026 gives retention criteria and no periods. It says customer content, including email contents, may train AI models unless the user selects Maximum Privacy, and the terms allow training third-party models. Google account data is limited to user-facing functions under Google's Limited Use rules. The FAQ says account deletion takes up to 24 hours, with backups later. No DPA found (12 of 30). One endpoint is marked deprecated with no date, and no deprecation policy was found (4 of 20). Stripe and Google Analytics are named. Model providers, hosting and other sub-processors are not (3 of 20)." } ], "assessment": { "date": "2026-10-12", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Graded on the Poke API and the `poke` npm package. A call returns a two-field acknowledgement and the assistant's answer goes to the owner's message thread, so a calling agent cannot read the result (10 of 25). No endpoint reads conversations, memories or integrations, so there is nothing to page or filter (3 of 20). Errors documented are 401 and a `success` boolean (6 of 20). No idempotency key or retry guidance, and a repeated POST is a second instruction (2 of 20). One endpoint and one conventional field. One official SDK, for Node.js, which also creates webhook triggers (9 of 15).", "maintenance": "The newest product entry in the release notes is Poke Human on 25 June 2026, 109 days before the check (10 of 30). The entry of 23 July 2026 announces the move to Cognition and changes nothing in the product. Counting it would give 20. One dated entry in the last 90 days (0). A public changelog, a support address, a Discord server and a status page whose incidents close with one-line notes (8 of 15). The `poke` npm package, a CLI and Node.js SDK, reached 4.0.461 on 23 August 2026 through GitHub Actions trusted publishing, the only official SDK (8 of 15). The package declares no dependencies and links no repository (5 of 10).", "payments": "No x402, MPP or L402 in the docs, llms.txt or pricing page (0). Plan prices are public, $0, $19 and $199 a month, and Ultra credits are $1 each. Allowances are not given in numbers and nothing is priced per call (10). The Free plan needs no card (20). A person signs up with a phone number or email and creates the key in a browser (0).", "reliability": "Read as a hosted service. status.poke.com is an incident.io page with components for App, Email, Integrations, iMessage, WhatsApp, SMS and API, and a history view (20). Two incidents from July to 12 October 2026. On 22 July iMessage had a 42-minute partial outage attributed to an upstream provider. An issue with Poke Sites, marked degraded performance on App, stayed open from 15 to 29 September and closed with the note \"fixed it\". No core outage of an hour or more, but one incident open for two weeks (18 of 30). The API page has a rate limits heading with no numbers (0). It advises batching and delays, with no `Retry-After`, backoff figures or idempotency key (3 of 15). No SLA found (0). The release notes of 19 March 2026 call Poke generally available (10).", "schema": "Graded on the Poke API, the one documented interface an outside program can call. No OpenAPI file or other machine-readable contract was found (0). poke.com/llms.txt lists seven docs pages (10). The API page states the purpose, four use cases and what happens after a message arrives (12 of 20). The body is any JSON object, forwarded whole to the assistant, with `message` shown by convention and no types or constraints (2 of 15). Examples in curl, Python and JavaScript, a response sample, and one documented error, 401 (9 of 15). The path carries `v1`. The page marks the older `/api/v1/inbound-sms/webhook` deprecated with no date. Release notes are public and have covered major updates only since March 2026 (9 of 15).", "security": "API keys are named, created in Kitchen, shown once and revoked individually, with no scopes or expiry (20). We took 5 off, half the checklist's deduction, because the docs give a prefilled link that carries a third-party MCP server's key as `apiKey` in the query string. The secret is not Poke's own key, so not the full 10 (15 of 30). A message sent with a key is processed with full access to email, calendar and integrations. No read-only mode or approval setting is documented. Release notes mention email draft approval and attachment preview before sending, without describing a control (4 of 20). Poke reads mail, web pages and MCP tool output, and no prompt-injection guidance was found (0 of 15). API messages appear in the conversation, and MCP servers receive `X-Poke-User-Id`. No audit log is documented (3 of 15). security.txt answers 404, and no disclosure policy, bounty or certification was found on poke.com. The privacy notice commits to Google's Limited Use requirements (2 of 20).", "transparency": "Closed service with published Terms of Service, last modified 17 March 2026, naming The Interaction Company of California d/b/a Poke (15 of 30). The privacy notice of 11 September 2026 gives retention criteria and no periods. It says customer content, including email contents, may train AI models unless the user selects Maximum Privacy, and the terms allow training third-party models. Google account data is limited to user-facing functions under Google's Limited Use rules. The FAQ says account deletion takes up to 24 hours, with backups later. No DPA found (12 of 30). One endpoint is marked deprecated with no date, and no deprecation policy was found (4 of 20). Stripe and Google Analytics are named. Model providers, hosting and other sub-processors are not (3 of 20)." }, "sources": [ { "what": "home page", "url": "https://poke.com/", "seen": "2026-10-12" }, { "what": "pricing", "url": "https://poke.com/pricing", "seen": "2026-10-12" }, { "what": "FAQ", "url": "https://poke.com/faq", "seen": "2026-10-12" }, { "what": "docs welcome", "url": "https://poke.com/docs", "seen": "2026-10-12" }, { "what": "Poke API docs", "url": "https://poke.com/docs/api", "seen": "2026-10-12" }, { "what": "MCP servers docs", "url": "https://poke.com/docs/mcp-servers", "seen": "2026-10-12" }, { "what": "managing integrations", "url": "https://poke.com/docs/managing-integrations", "seen": "2026-10-12" }, { "what": "usage and resets", "url": "https://poke.com/docs/usage-and-resets", "seen": "2026-10-12" }, { "what": "release notes", "url": "https://poke.com/docs/release-notes", "seen": "2026-10-12" }, { "what": "creating recipes", "url": "https://poke.com/docs/creating-recipes", "seen": "2026-10-12" }, { "what": "privacy notice, last updated 11 September 2026", "url": "https://poke.com/privacy", "seen": "2026-10-12" }, { "what": "terms of service, last modified 17 March 2026", "url": "https://poke.com/terms", "seen": "2026-10-12" }, { "what": "llms.txt", "url": "https://poke.com/llms.txt", "seen": "2026-10-12" }, { "what": "robots.txt, answered 404", "url": "https://poke.com/robots.txt", "seen": "2026-10-12" }, { "what": "security.txt, answered 404", "url": "https://poke.com/.well-known/security.txt", "seen": "2026-10-12" }, { "what": "status page", "url": "https://status.poke.com/", "seen": "2026-10-12" }, { "what": "status history", "url": "https://status.poke.com/history", "seen": "2026-10-12" }, { "what": "incident of 22 July 2026", "url": "https://status.poke.com/incidents/01KY5B9B1TWEDKP37WHMM2V2NS", "seen": "2026-10-12" }, { "what": "incident of 15 to 29 September 2026", "url": "https://status.poke.com/incidents/01M2K0VG1ZVNN7PARY1EM4VAKB", "seen": "2026-10-12" }, { "what": "Cognition announcement of 23 July 2026", "url": "https://cognition.com/blog/interaction", "seen": "2026-10-12" }, { "what": "npm registry record for the poke package (versions, dates, README)", "url": "https://registry.npmjs.org/poke", "seen": "2026-10-12" }, { "what": "RDAP record for poke.com", "url": "https://rdap.verisign.com/com/v1/domain/poke.com", "seen": "2026-10-12" }, { "what": "Interaction Co. page", "url": "https://interaction.co/about", "seen": "2026-10-12" } ], "openQuestions": [ "Kind is `platform`. Poke is a hosted assistant used through messaging apps, and its API is a single inbound message endpoint that returns no result, so `http-api` would overstate it. Graded as a hosted service.", "The lead gave no docs link and described no public interface. Poke has docs at poke.com/docs, an inbound API, an npm CLI and SDK, and RCS as a fourth channel.", "Maintenance scores recency on the Poke Human entry of 25 June 2026. Counting the Cognition notice of 23 July 2026 would add 10.", "The Security deduction of 5 for the `apiKey` query parameter on the prefilled integration link is a judgement call. The checklist's 10 is written for a product's own credential.", "The terms (section 2.2) forbid automated access for scraping and use for benchmarking or competitive analysis. Recorded as a fact with no deduction. It matters before any probe is run.", "The terms and privacy notice do not mention Cognition. Whether Cognition's policies or models now apply to Poke data was not established.", "unchecked: which actions Poke takes without approval and any approval setting, which sit in the signed-in app and were not read.", "unchecked: the Maximum Privacy setting, its default and what else it changes. The privacy notice links the FAQ for privacy protections, and the FAQ page read has no privacy section.", "unchecked: model providers, sub-processors, hosting region and credential storage. None is named on the pages read.", "unchecked: OAuth scopes requested from Google and Microsoft. The privacy notice says the narrowest needed, without listing them.", "unchecked: poke.com/health (consumer health privacy notice), poke.com/docs/merging-accounts, the recipe pages and poke.com/explore, left unread to keep to the page budget.", "unchecked: a source repository for the `poke` npm package. The registry record links none, and no GitHub organisation was confirmed.", "unchecked: npm weekly downloads and whether the Free plan includes API keys.", "unchecked: security certifications. The site loads a cookie consent script from a compliance vendor, which is not evidence of a certification.", "poke.com/robots.txt and status.poke.com/robots.txt answered 404, read as no rules. registry.npmjs.org/robots.txt answered with a package record, not a robots file, read as no rules." ] }, "negative": 0, "verdict": "Hosted assistant that answers in Apple Messages, WhatsApp, Telegram and RCS and acts in Gmail, Outlook, calendars and MCP servers. Plan prices and a status page are public. No approval settings, credential storage, model providers or retention periods are documented, and customer content trains models unless Maximum Privacy is selected.", "bestFor": "One person who wants an assistant in their text messages that reads and drafts mail, manages a calendar and reaches other apps through MCP.", "strengths": [ "Answers on Apple Messages, WhatsApp, Telegram and RCS, with the channel chosen in settings, per the docs welcome page and FAQ", "Free plan with no card, Pro at $19 a month and Ultra at $199 a month, all published without a sign-in", "Connects any remote MCP server by URL, with API key or OAuth, and OAuth servers with Dynamic Client Registration need no setup", "status.poke.com lists App, Email, Integrations, three messaging channels and API, with two incidents from July to 12 October 2026", "Named API keys are created in Kitchen, shown once and revoked one at a time" ], "weaknesses": [ "No documented setting for which actions need approval before Poke sends, deletes or spends. Release notes mention email draft approval only in passing", "Customer content, including email contents, may train AI models unless the user selects Maximum Privacy, per the privacy notice of 11 September 2026", "Model providers, sub-processors, hosting locations and where account tokens are stored are not named in the pages read", "An API key message is processed with full access to email, calendar and integrations. Keys have no scopes", "No security.txt, disclosure policy, bug bounty or certification was found on poke.com", "The terms forbid automated access for scraping and use for benchmarking or competitive analysis. This matters before any probe is run" ], "agentNotes": [ "POST JSON to `https://poke.com/api/v1/inbound/api-message` with a Bearer key from Kitchen. Legacy `pk_` keys work only on the deprecated `/api/v1/inbound-sms/webhook`", "Expect only `{\"success\": true}` back. Poke's answer goes to the owner's message thread, not to the caller", "Do not retry a POST blindly. No idempotency key is documented, and a repeated message may make Poke act twice", "Treat an API key as full access to the owner's mail, calendar and integrations. Create one key per automation and revoke it when done", "Avoid the prefilled integration link with `apiKey` in the query string for real secrets. Enter the key in the form or use `npx poke@latest mcp add -k`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 37.6 } ], "editorialScores": { "ergonomics": 30, "maintenance": 31, "payments": 30, "reliability": 51, "schema": 42, "security": 24, "transparency": 34 }, "provenanceScore": 81 }, "connect": { "install": "npx poke@latest login", "http": "curl 'https://poke.com/api/v1/inbound/api-message' \\\n -H \"Authorization: Bearer YOUR_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"message\": \"test\"}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/poke" }, "notable": [ "The Interaction Company of California joined Cognition on 23 July 2026. Poke's release notes say the product works as before (https://poke.com/docs/release-notes; https://cognition.com/blog/interaction)", "The privacy notice says customer content may be used to train AI models, and that data from users who select Maximum Privacy will not be used for model training (https://poke.com/privacy)", "The terms grant Poke rights in user content for purposes that include training third-party AI and large language models behind the service (https://poke.com/terms, section 3)", "For Google accounts the privacy notice commits to the narrowest scopes needed, Google's Limited Use requirements, and no human reading except with agreement, for security or by law (https://poke.com/privacy)", "Messages sent through the Poke API are processed with full access to email, calendar, reminders and connected integrations (https://poke.com/docs/api)", "Poke Human, launched 25 June 2026, sends tasks such as reservations, phone calls and orders to a person. The FAQ says operators see only the task details, not chat history, memories or integrations (https://poke.com/faq)", "Account deletion is at poke.com/settings/privacy and may take up to 24 hours, with backup archives and legal holds excepted (https://poke.com/faq)", "Poke calls tools on any connected MCP server and sends `X-Poke-User-Id` on every request. A prefilled integration link accepts the server's key as `apiKey` in the query string (https://poke.com/docs/mcp-servers)", "Recipes bundle integrations and onboarding text, are reviewed before publication, and pay their creators through Kitchen payouts (https://poke.com/docs/creating-recipes; https://poke.com/terms, section 20)", "The terms forbid automated access for scraping and use of the service for benchmarking or competitive analysis (https://poke.com/terms, section 2.2)", "Since 19 March 2026 the release notes cover major updates only (https://poke.com/docs/release-notes)", "The Cognition announcement says people exchanged more than 100 million messages with Poke in three months. That is Cognition's figure (https://cognition.com/blog/interaction)" ], "area": "frameworks", "details": [ { "label": "Channels", "value": "Apple Messages, WhatsApp, Telegram and RCS, chosen at poke.com/settings/messaging. One phone number an account. Voice messages accepted, per the home page (https://poke.com/docs; https://poke.com/faq)" }, { "label": "Acts without asking", "value": "The home page says Poke uses connected services and its memory proactively, and Pro runs automations in the background. No list of actions that need approval and no approval setting was found. Release notes mention email draft approval and attachment preview before sending (https://poke.com; https://poke.com/docs/release-notes)" }, { "label": "Accounts", "value": "Gmail and Outlook mail, calendar and contacts. Recipes for Notion, Linear, Todoist, Asana, GitHub, Sentry, Vercel, Netlify, Supabase, Ramp, Webflow, Oura and others, and any MCP server by URL. Disconnect at poke.com/integrations. Where tokens are stored is not stated (https://poke.com/docs/managing-integrations)" }, { "label": "Memory and deletion", "value": "The home page and FAQ refer to Poke's memory and memories. What is kept and for how long is not documented. Delete Account at poke.com/settings/privacy, up to 24 hours, backups later (https://poke.com/faq)" }, { "label": "Where it runs", "value": "On the vendor's servers. Model providers and hosting locations are not named. Pro and Ultra are described as using frontier models. Transfers include the United States, per the privacy notice (https://poke.com/pricing; https://poke.com/privacy)" }, { "label": "Training", "value": "Customer content may train AI models unless the user selects Maximum Privacy. Google account data is held to Google's Limited Use requirements (https://poke.com/privacy)" }, { "label": "API", "value": "`POST https://poke.com/api/v1/inbound/api-message`, Bearer key, any JSON body, answers `{\"success\": true, \"message\": \"Message sent successfully\"}`. The npm SDK also creates webhook triggers (https://poke.com/docs/api; npm package `poke` 4.0.461)" }, { "label": "MCP client", "value": "Remote MCP servers by URL, with API key or OAuth. OAuth without Dynamic Client Registration needs a client ID and secret through a Kitchen template or the CLI tunnel. Local servers reach Poke through `npx poke@latest tunnel` (https://poke.com/docs/mcp-servers)" }, { "label": "Plans", "value": "Free $0, Pro $19 a month, Ultra $199 a month with credits at $1 each and Poke Human (https://poke.com/pricing)" }, { "label": "Status", "value": "status.poke.com on incident.io. Two incidents from July to 12 October 2026, a 42-minute iMessage partial outage on 22 July and a Poke Sites issue open 15 to 29 September (https://status.poke.com/history)" }, { "label": "Ownership", "value": "The Interaction Company of California Inc., 169 Waverley St, Palo Alto, per the privacy notice. Joined Cognition on 23 July 2026 (https://poke.com/privacy; https://cognition.com/blog/interaction)" } ], "unitPrices": [ { "item": "Pro", "unit": "month", "usd": 19, "note": "billed monthly, refilling usage allowance with no published figure" }, { "item": "Ultra", "unit": "month", "usd": 199, "note": "billed monthly, includes a monthly credit pool and Poke Human" }, { "item": "Ultra top-up credit", "unit": "credit", "usd": 1, "note": "1 credit is $1 of usage" } ], "provenance": { "legalEntity": "The Interaction Company of California Inc.", "domain": "poke.com", "domainRegistered": "1997-03-26", "endpointOnVendorDomain": true, "terms": "https://poke.com/terms", "privacy": "https://poke.com/privacy", "statusPage": "https://status.poke.com", "changelog": "https://poke.com/docs/release-notes", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The privacy notice (last updated 11 September 2026) names The Interaction Company of California Inc. and gives 169 Waverley St Apt B, Palo Alto, CA 94301 as the controller's address. The terms (last modified 17 March 2026) name The Interaction Company of California d/b/a Poke.", "Cognition announced on 23 July 2026 that The Interaction Company of California was joining it. The terms and privacy notice read on 12 October 2026 do not name Cognition.", "poke.com/.well-known/security.txt answered 404. poke.com/robots.txt also answered 404, so the host publishes no crawl rules.", "RDAP for poke.com gives a registration date of 1997-03-26 and NameCheap, Inc. as registrar.", "The API answers at poke.com/api/v1, on the vendor's domain." ], "score": 81, "checks": [ { "check": "Legal entity named", "value": "The Interaction Company of California Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "poke.com, registered 1997-03-26 (29 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "poke.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 4 clauses that cost points", "points": 1.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.poke.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://poke.com/terms", "state": "read", "readAt": "2026-10-12", "statedDate": "2026-03-17", "words": 11415, "points": 1.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Modified: March 17, 2026", "says": "Last updated 2026-03-17" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These Terms will be governed by the laws of the State of California, without respect to its conflict of laws principles.", "says": "The law of the State of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL ANY POKE INDEMNITEE BE LIABLE FOR ANY INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, OR DATA, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR RELAT…", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "We may, with or without prior notice, permanently terminate or temporarily suspend your access to your User Account and/or the Service without liability and for any or no reason, including if you violate any provision of these Terms." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Any change to our pricing and payment terms will become effective in the billing cycle following our provision of notice of such change.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "If you don't agree to these Terms, you may not use the Service." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "(ii) to improve our products and the Service and for our other business purposes (including but not limited to the purposes of training third-party artificial intelligence and large language models underlying the Service)", "costsPoints": true }, { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "2.2.2 use any automated or non-automated means to access the Service for \"scraping\" (except that public search engines may use spiders to create searchable indices of public materials, only as specified in the robots.txt file);", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "2.2.6 use the Service in competition with us, to develop competing products or services, for benchmarking or competitive analysis of the Service, or otherwise to our detriment or disadvantage;", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We may, with or without prior notice, change or stop providing the Service, to you or to Users generally, or create usage limits for the Service.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "You may de-activate your User Account or any Subscription at any time and we may suspend or terminate your Subscription, your User Account, or the Service at any time, in our sole discretion." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "…YOU OPT OUT PURSUANT TO THE INSTRUCTIONS IN THE ARBITRATION AGREEMENT, THE EXCLUSIVE USE OF FINAL AND BINDING ARBITRATION ON AN INDIVIDUAL BASIS TO RESOLVE DISPUTES BETWEEN YOU AND US, INCLUDING ANY CLAIMS THAT AROSE OR WERE ASSERTED BEFORE YOU AGREED TO THESE TERMS." } ], "notes": [ { "date": "2026-10-08", "text": "The right to use the service is granted for personal use only.", "quote": "you are hereby granted a non-exclusive, limited, non-transferable, and freely revocable right to access and use the Service, solely for your personal use, as permitted by the features of the Service." }, { "date": "2026-10-08", "text": "Users may not present output as human-generated or use it to train their own machine learning models.", "quote": "You shall not represent that Output was human-generated or use the Output to train your own machine learning models." }, { "date": "2026-10-08", "text": "Cancelling a subscription requires notice at least 30 days before the next subscription term starts.", "quote": "To cancel any Subscription, you must notify us at least 30 days before the start of the next Subscription Term by using the appropriate functionalities of the Service" } ] }, { "kind": "privacy", "url": "https://poke.com/privacy", "state": "read", "readAt": "2026-10-12", "statedDate": "2026-09-11", "words": 7251, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: September 11, 2026", "says": "Last updated 2026-09-11" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "The categories of personal data we collect depend on how you interact with us and our services." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We use this data to provide user-facing features of our services, and we store it only for as long as needed to provide those features or as required by law.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Please note that we regularly use third-party payment providers, including Stripe, to process payments made to us." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "•Right to Access: The right to obtain confirmation of whether we are processing personal data about you, access to and a copy of the personal data we are processing about you, and information relating to its processing, including:" }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please contact us at: legal@interaction.co.", "says": "legal@interaction.co" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "We may transfer personal data about you outside of the EEA, UK, and Switzerland, and when we do so we rely on appropriate or suitable safeguards recognized under applicable law, including adequacy decisions, standard contractual clauses, and the EU-US Data Privacy Framework.", "says": "Relies on standard contractual clauses and the Data Privacy Framework" } ], "toKnow": [ { "key": "training.optout", "label": "Says it may use customer content to train or improve models, and gives an opt-out", "found": true, "quote": "Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with, including to train our artificial intelligence models. Data from users who select Maximum Privacy will not be used for model training;" }, { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help link the personal data we and our third-party partners collect to the same person, or otherwise target advertising to an individual on a third-party website or platform." } ], "notes": [ { "date": "2026-10-08", "text": "Third-party technologies on the services may record mouse movements, scrolling, clicks and keystrokes.", "quote": "We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services" } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/poke.json", "live": { "slug": "poke", "vendorStatus": { "page": "https://status.poke.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-12T18:57:01.261625139Z" }, "updatedAt": "2026-10-12T18:57:01.261625139Z" } } }