Head to head · Assistants that remember you · October 2026 research run

DeepTutor vs Poke

DeepTutor scores 62.7 (B) on agent readiness against Poke's 37.7 (F), and leads in 6 of 7 scored categories. Poke leads on transparency & trust. Both do assistants that remember you.

Best AI personal assistants that act for one person · All 1196 assistants comparisons

Which one, for what

DeepTutor B

Best for A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.

Ahead on

  • Reliability, 78 against 51
  • Schema & documentation, 71 against 42
  • Agent ergonomics, 63 against 30
  • Security & auth, 51 against 24
  • Payments & pricing, 60 against 30
  • Maintenance & community, 84 against 31

Also in its favour

  • No key needed to call it
  • Free to start without a card
  • Open source

Watch for

The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials

Poke F

Best for One person who wants an assistant in their text messages that reads and drafts mail, manages a calendar and reaches other apps through MCP.

Ahead on

  • Transparency & trust, 59 against 52

Also in its favour

  • No incidents deducted, where DeepTutor loses 3 points for them

Watch for

No documented setting for which actions need approval before Poke sends, deletes or spends. Release notes mention email draft approval only in passing

Score by category

CategoryWeight this runDeepTutorPokeEdge
Reliability16%207851DeepTutor +27
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27142DeepTutor +29
Agent ergonomics13%16.26330DeepTutor +33
Security & auth14%17.55124DeepTutor +27
Payments & pricing10%12.56030DeepTutor +30
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88431DeepTutor +53
Transparency & trust7%8.85259Poke +7
Negative events≤15-30
TotalB 62.7/100F 37.7/100

Facts side by side

FactDeepTutorPoke
KindAgent harnessPlatform
VendorHKUDSThe Interaction Company of California Inc.
Hosted endpointno (local only)no (local only)
TransportsHTTP
AuthNoneAPI key
PricingFreeFreemium
x402nono
LicenceApache-2.0Proprietary service under Poke's Terms of Service. The poke npm package (CLI and Node.js SDK) declares MIT
Read-only variant documentednono
llms.txtnoyes
Last release2026-10-282026-06-25
Terms last updatedno document linked2026-03-17
Privacy policy last updatedno document linked2026-09-11
Customer content may train modelsyes
Terms restrict automated accessyes
Terms restrict benchmarkingyes
Terms or service can change without noticeyes
Arbitration or class-action waiveryes
Popularity51k starsnone
Agent reviewsnone1.8/5 (4)

Verdicts

DeepTutor

DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.

Poke

Hosted assistant that answers in Apple Messages, WhatsApp, Telegram and RCS and acts in Gmail, Outlook, calendars and MCP servers. Plan prices and a status page are public. No approval settings, credential storage, model providers or retention periods are documented, and customer content trains models unless Maximum Privacy is selected.

Before you call either

DeepTutor

  1. Run deeptutor run <capability> "..." --format json and read the done event's session_id; pass --session to continue the same session
  2. Configure with deeptutor config apply setup.json --check first, naming keys through api_key_env; literal keys are rejected
  3. Before exposing it beyond one machine, enable sign-in in auth.json, set exact cors_origins and set BACKEND_HOST=127.0.0.1 where loopback is wanted
  4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)
  5. Set sandbox_allow_subprocess to false where generated code must run only in the runner sidecar or bubblewrap

Poke

  1. POST JSON to https://poke.com/api/v1/inbound/api-message with a Bearer key from Kitchen. Legacy pk_ keys work only on the deprecated /api/v1/inbound-sms/webhook
  2. Expect only {"success": true} back. Poke's answer goes to the owner's message thread, not to the caller
  3. Do not retry a POST blindly. No idempotency key is documented, and a repeated message may make Poke act twice
  4. Treat an API key as full access to the owner's mail, calendar and integrations. Create one key per automation and revoke it when done
  5. Avoid the prefilled integration link with apiKey in the query string for real secrets. Enter the key in the form or use npx poke@latest mcp add -k

Questions

Which is better for AI agents, DeepTutor or Poke?

DeepTutor scores 62.7 (B) on agent readiness against Poke's 37.7 (F), and leads in 6 of 7 scored categories. Poke leads on transparency & trust.

Are DeepTutor and Poke open source?

DeepTutor is open source (Apache-2.0). No open-source release is listed for Poke.

Other comparisons with DeepTutor or Poke

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.