{ "data": { "similar": [ { "grade": "BB", "json": "https://www.anchorterminal.com/tools/zeroclaw.json", "name": "ZeroClaw", "score": 70.2, "shared": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.accounts", "agent.mcp-client" ], "slug": "zeroclaw" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/nanoclaw.json", "name": "NanoClaw", "score": 68.3, "shared": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "agent.mcp-client", "assistant.accounts" ], "slug": "nanoclaw" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/hermes-agent.json", "name": "Hermes Agent", "score": 67.9, "shared": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "agent.mcp-client" ], "slug": "hermes-agent" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/openclaw.json", "name": "OpenClaw", "score": 67.1, "shared": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "agent.mcp-client" ], "slug": "openclaw" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/ironclaw.json", "name": "IronClaw", "score": 66.7, "shared": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "agent.mcp-client" ], "slug": "ironclaw" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/nanobot.json", "name": "nanobot", "score": 62.4, "shared": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.accounts", "agent.mcp-client" ], "slug": "nanobot" } ], "tool": { "slug": "poke", "name": "Poke", "vendor": "The Interaction Company of California Inc.", "vendorUrl": "https://poke.com", "kind": "platform", "category": "personal-assistants", "summary": "Hosted personal assistant from The Interaction Company of California, reached by text on Apple Messages, WhatsApp, Telegram and RCS. It works across the owner's Gmail or Outlook mail, calendar, contacts and connected apps.", "url": "https://www.anchorterminal.com/tools/poke", "markdownUrl": "https://www.anchorterminal.com/tools/poke.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/poke.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/poke.json", "license": "Proprietary service under Poke's Terms of Service. The `poke` npm package (CLI and Node.js SDK) declares MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "poke" } ], "auth": "api-key", "authNotes": "A person signs up at poke.com and connects a Google or Microsoft account. The Poke API takes `Authorization: Bearer \u003ckey\u003e` with a V2 key created in Kitchen under API Keys. Keys are named, shown once, revocable one at a time and have no scopes. Older `pk_` keys work only on the deprecated endpoint. The CLI signs in with a browser device code and stores credentials in `~/.config/poke/credentials.json`. Third-party MCP servers are connected with an API key or OAuth (https://poke.com/docs/api; https://poke.com/docs/mcp-servers; https://poke.com/docs/creating-recipes).", "pricing": "freemium", "pricingNotes": "Free at $0 with no card. Pro is $19 a month and Ultra $199 a month on monthly billing. Free and Pro have a refilling usage allowance, with no figures published, and Poke continues in a lighter mode past it. Ultra includes a monthly credit pool (1 credit is $1 of usage), with top-ups and optional auto-reload. Poke Human is included with Ultra, with real-world expenses charged at cost. Model usage is not billed separately (https://poke.com/pricing; https://poke.com/docs/usage-and-resets; https://poke.com/faq, checked 2026-10-12).", "priceSummary": "$19 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt or the pricing page (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://poke.com/docs", "llmsTxt": "https://poke.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "agent.mcp-client" ], "tags": [ "hosted", "closed-source", "messaging", "imessage", "whatsapp", "telegram", "gmail", "outlook", "mcp-client", "api-key", "free-tier", "status-page", "llms-txt", "trains-on-data-by-default" ], "lastRelease": "2026-06-25", "graded": true, "anchor": { "graded": true, "score": 37.6, "grade": "F", "agentReady": false, "rank": 955, "ranked": true, "rankOf": 986, "categoryRank": 15, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 30, "maintenance": 31, "payments": 30, "reliability": 51, "schema": 42, "security": 24, "transparency": 58 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 51, "points": 10.2, "reason": "Read as a hosted service. status.poke.com is an incident.io page with components for App, Email, Integrations, iMessage, WhatsApp, SMS and API, and a history view (20). Two incidents from July to 12 October 2026. On 22 July iMessage had a 42-minute partial outage attributed to an upstream provider. An issue with Poke Sites, marked degraded performance on App, stayed open from 15 to 29 September and closed with the note \"fixed it\". No core outage of an hour or more, but one incident open for two weeks (18 of 30). The API page has a rate limits heading with no numbers (0). It advises batching and delays, with no `Retry-After`, backoff figures or idempotency key (3 of 15). No SLA found (0). The release notes of 19 March 2026 call Poke generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 42, "points": 6.83, "reason": "Graded on the Poke API, the one documented interface an outside program can call. No OpenAPI file or other machine-readable contract was found (0). poke.com/llms.txt lists seven docs pages (10). The API page states the purpose, four use cases and what happens after a message arrives (12 of 20). The body is any JSON object, forwarded whole to the assistant, with `message` shown by convention and no types or constraints (2 of 15). Examples in curl, Python and JavaScript, a response sample, and one documented error, 401 (9 of 15). The path carries `v1`. The page marks the older `/api/v1/inbound-sms/webhook` deprecated with no date. Release notes are public and have covered major updates only since March 2026 (9 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 30, "points": 4.88, "reason": "Graded on the Poke API and the `poke` npm package. A call returns a two-field acknowledgement and the assistant's answer goes to the owner's message thread, so a calling agent cannot read the result (10 of 25). No endpoint reads conversations, memories or integrations, so there is nothing to page or filter (3 of 20). Errors documented are 401 and a `success` boolean (6 of 20). No idempotency key or retry guidance, and a repeated POST is a second instruction (2 of 20). One endpoint and one conventional field. One official SDK, for Node.js, which also creates webhook triggers (9 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 24, "points": 4.2, "reason": "API keys are named, created in Kitchen, shown once and revoked individually, with no scopes or expiry (20). We took 5 off, half the checklist's deduction, because the docs give a prefilled link that carries a third-party MCP server's key as `apiKey` in the query string. The secret is not Poke's own key, so not the full 10 (15 of 30). A message sent with a key is processed with full access to email, calendar and integrations. No read-only mode or approval setting is documented. Release notes mention email draft approval and attachment preview before sending, without describing a control (4 of 20). Poke reads mail, web pages and MCP tool output, and no prompt-injection guidance was found (0 of 15). API messages appear in the conversation, and MCP servers receive `X-Poke-User-Id`. No audit log is documented (3 of 15). security.txt answers 404, and no disclosure policy, bounty or certification was found on poke.com. The privacy notice commits to Google's Limited Use requirements (2 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 in the docs, llms.txt or pricing page (0). Plan prices are public, $0, $19 and $199 a month, and Ultra credits are $1 each. Allowances are not given in numbers and nothing is priced per call (10). The Free plan needs no card (20). A person signs up with a phone number or email and creates the key in a browser (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 31, "points": 2.71, "reason": "The newest product entry in the release notes is Poke Human on 25 June 2026, 109 days before the check (10 of 30). The entry of 23 July 2026 announces the move to Cognition and changes nothing in the product. Counting it would give 20. One dated entry in the last 90 days (0). A public changelog, a support address, a Discord server and a status page whose incidents close with one-line notes (8 of 15). The `poke` npm package, a CLI and Node.js SDK, reached 4.0.461 on 23 August 2026 through GitHub Actions trusted publishing, the only official SDK (8 of 15). The package declares no dependencies and links no repository (5 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 58, "points": 5.08, "note": "editorial 34, provenance 81", "reason": "Closed service with published Terms of Service, last modified 17 March 2026, naming The Interaction Company of California d/b/a Poke (15 of 30). The privacy notice of 11 September 2026 gives retention criteria and no periods. It says customer content, including email contents, may train AI models unless the user selects Maximum Privacy, and the terms allow training third-party models. Google account data is limited to user-facing functions under Google's Limited Use rules. The FAQ says account deletion takes up to 24 hours, with backups later. No DPA found (12 of 30). One endpoint is marked deprecated with no date, and no deprecation policy was found (4 of 20). Stripe and Google Analytics are named. Model providers, hosting and other sub-processors are not (3 of 20)." } ], "assessment": { "date": "2026-10-12", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Graded on the Poke API and the `poke` npm package. A call returns a two-field acknowledgement and the assistant's answer goes to the owner's message thread, so a calling agent cannot read the result (10 of 25). No endpoint reads conversations, memories or integrations, so there is nothing to page or filter (3 of 20). Errors documented are 401 and a `success` boolean (6 of 20). No idempotency key or retry guidance, and a repeated POST is a second instruction (2 of 20). One endpoint and one conventional field. One official SDK, for Node.js, which also creates webhook triggers (9 of 15).", "maintenance": "The newest product entry in the release notes is Poke Human on 25 June 2026, 109 days before the check (10 of 30). The entry of 23 July 2026 announces the move to Cognition and changes nothing in the product. Counting it would give 20. One dated entry in the last 90 days (0). A public changelog, a support address, a Discord server and a status page whose incidents close with one-line notes (8 of 15). The `poke` npm package, a CLI and Node.js SDK, reached 4.0.461 on 23 August 2026 through GitHub Actions trusted publishing, the only official SDK (8 of 15). The package declares no dependencies and links no repository (5 of 10).", "payments": "No x402, MPP or L402 in the docs, llms.txt or pricing page (0). Plan prices are public, $0, $19 and $199 a month, and Ultra credits are $1 each. Allowances are not given in numbers and nothing is priced per call (10). The Free plan needs no card (20). A person signs up with a phone number or email and creates the key in a browser (0).", "reliability": "Read as a hosted service. status.poke.com is an incident.io page with components for App, Email, Integrations, iMessage, WhatsApp, SMS and API, and a history view (20). Two incidents from July to 12 October 2026. On 22 July iMessage had a 42-minute partial outage attributed to an upstream provider. An issue with Poke Sites, marked degraded performance on App, stayed open from 15 to 29 September and closed with the note \"fixed it\". No core outage of an hour or more, but one incident open for two weeks (18 of 30). The API page has a rate limits heading with no numbers (0). It advises batching and delays, with no `Retry-After`, backoff figures or idempotency key (3 of 15). No SLA found (0). The release notes of 19 March 2026 call Poke generally available (10).", "schema": "Graded on the Poke API, the one documented interface an outside program can call. No OpenAPI file or other machine-readable contract was found (0). poke.com/llms.txt lists seven docs pages (10). The API page states the purpose, four use cases and what happens after a message arrives (12 of 20). The body is any JSON object, forwarded whole to the assistant, with `message` shown by convention and no types or constraints (2 of 15). Examples in curl, Python and JavaScript, a response sample, and one documented error, 401 (9 of 15). The path carries `v1`. The page marks the older `/api/v1/inbound-sms/webhook` deprecated with no date. Release notes are public and have covered major updates only since March 2026 (9 of 15).", "security": "API keys are named, created in Kitchen, shown once and revoked individually, with no scopes or expiry (20). We took 5 off, half the checklist's deduction, because the docs give a prefilled link that carries a third-party MCP server's key as `apiKey` in the query string. The secret is not Poke's own key, so not the full 10 (15 of 30). A message sent with a key is processed with full access to email, calendar and integrations. No read-only mode or approval setting is documented. Release notes mention email draft approval and attachment preview before sending, without describing a control (4 of 20). Poke reads mail, web pages and MCP tool output, and no prompt-injection guidance was found (0 of 15). API messages appear in the conversation, and MCP servers receive `X-Poke-User-Id`. No audit log is documented (3 of 15). security.txt answers 404, and no disclosure policy, bounty or certification was found on poke.com. The privacy notice commits to Google's Limited Use requirements (2 of 20).", "transparency": "Closed service with published Terms of Service, last modified 17 March 2026, naming The Interaction Company of California d/b/a Poke (15 of 30). The privacy notice of 11 September 2026 gives retention criteria and no periods. It says customer content, including email contents, may train AI models unless the user selects Maximum Privacy, and the terms allow training third-party models. Google account data is limited to user-facing functions under Google's Limited Use rules. The FAQ says account deletion takes up to 24 hours, with backups later. No DPA found (12 of 30). One endpoint is marked deprecated with no date, and no deprecation policy was found (4 of 20). Stripe and Google Analytics are named. Model providers, hosting and other sub-processors are not (3 of 20)." }, "sources": [ { "what": "home page", "url": "https://poke.com/", "seen": "2026-10-12" }, { "what": "pricing", "url": "https://poke.com/pricing", "seen": "2026-10-12" }, { "what": "FAQ", "url": "https://poke.com/faq", "seen": "2026-10-12" }, { "what": "docs welcome", "url": "https://poke.com/docs", "seen": "2026-10-12" }, { "what": "Poke API docs", "url": "https://poke.com/docs/api", "seen": "2026-10-12" }, { "what": "MCP servers docs", "url": "https://poke.com/docs/mcp-servers", "seen": "2026-10-12" }, { "what": "managing integrations", "url": "https://poke.com/docs/managing-integrations", "seen": "2026-10-12" }, { "what": "usage and resets", "url": "https://poke.com/docs/usage-and-resets", "seen": "2026-10-12" }, { "what": "release notes", "url": "https://poke.com/docs/release-notes", "seen": "2026-10-12" }, { "what": "creating recipes", "url": "https://poke.com/docs/creating-recipes", "seen": "2026-10-12" }, { "what": "privacy notice, last updated 11 September 2026", "url": "https://poke.com/privacy", "seen": "2026-10-12" }, { "what": "terms of service, last modified 17 March 2026", "url": "https://poke.com/terms", "seen": "2026-10-12" }, { "what": "llms.txt", "url": "https://poke.com/llms.txt", "seen": "2026-10-12" }, { "what": "robots.txt, answered 404", "url": "https://poke.com/robots.txt", "seen": "2026-10-12" }, { "what": "security.txt, answered 404", "url": "https://poke.com/.well-known/security.txt", "seen": "2026-10-12" }, { "what": "status page", "url": "https://status.poke.com/", "seen": "2026-10-12" }, { "what": "status history", "url": "https://status.poke.com/history", "seen": "2026-10-12" }, { "what": "incident of 22 July 2026", "url": "https://status.poke.com/incidents/01KY5B9B1TWEDKP37WHMM2V2NS", "seen": "2026-10-12" }, { "what": "incident of 15 to 29 September 2026", "url": "https://status.poke.com/incidents/01M2K0VG1ZVNN7PARY1EM4VAKB", "seen": "2026-10-12" }, { "what": "Cognition announcement of 23 July 2026", "url": "https://cognition.com/blog/interaction", "seen": "2026-10-12" }, { "what": "npm registry record for the poke package (versions, dates, README)", "url": "https://registry.npmjs.org/poke", "seen": "2026-10-12" }, { "what": "RDAP record for poke.com", "url": "https://rdap.verisign.com/com/v1/domain/poke.com", "seen": "2026-10-12" }, { "what": "Interaction Co. page", "url": "https://interaction.co/about", "seen": "2026-10-12" } ], "openQuestions": [ "Kind is `platform`. Poke is a hosted assistant used through messaging apps, and its API is a single inbound message endpoint that returns no result, so `http-api` would overstate it. Graded as a hosted service.", "The lead gave no docs link and described no public interface. Poke has docs at poke.com/docs, an inbound API, an npm CLI and SDK, and RCS as a fourth channel.", "Maintenance scores recency on the Poke Human entry of 25 June 2026. Counting the Cognition notice of 23 July 2026 would add 10.", "The Security deduction of 5 for the `apiKey` query parameter on the prefilled integration link is a judgement call. The checklist's 10 is written for a product's own credential.", "The terms (section 2.2) forbid automated access for scraping and use for benchmarking or competitive analysis. Recorded as a fact with no deduction. It matters before any probe is run.", "The terms and privacy notice do not mention Cognition. Whether Cognition's policies or models now apply to Poke data was not established.", "unchecked: which actions Poke takes without approval and any approval setting, which sit in the signed-in app and were not read.", "unchecked: the Maximum Privacy setting, its default and what else it changes. The privacy notice links the FAQ for privacy protections, and the FAQ page read has no privacy section.", "unchecked: model providers, sub-processors, hosting region and credential storage. None is named on the pages read.", "unchecked: OAuth scopes requested from Google and Microsoft. The privacy notice says the narrowest needed, without listing them.", "unchecked: poke.com/health (consumer health privacy notice), poke.com/docs/merging-accounts, the recipe pages and poke.com/explore, left unread to keep to the page budget.", "unchecked: a source repository for the `poke` npm package. The registry record links none, and no GitHub organisation was confirmed.", "unchecked: npm weekly downloads and whether the Free plan includes API keys.", "unchecked: security certifications. The site loads a cookie consent script from a compliance vendor, which is not evidence of a certification.", "poke.com/robots.txt and status.poke.com/robots.txt answered 404, read as no rules. registry.npmjs.org/robots.txt answered with a package record, not a robots file, read as no rules." ] }, "negative": 0, "verdict": "Hosted assistant that answers in Apple Messages, WhatsApp, Telegram and RCS and acts in Gmail, Outlook, calendars and MCP servers. Plan prices and a status page are public. No approval settings, credential storage, model providers or retention periods are documented, and customer content trains models unless Maximum Privacy is selected.", "bestFor": "One person who wants an assistant in their text messages that reads and drafts mail, manages a calendar and reaches other apps through MCP.", "strengths": [ "Answers on Apple Messages, WhatsApp, Telegram and RCS, with the channel chosen in settings, per the docs welcome page and FAQ", "Free plan with no card, Pro at $19 a month and Ultra at $199 a month, all published without a sign-in", "Connects any remote MCP server by URL, with API key or OAuth, and OAuth servers with Dynamic Client Registration need no setup", "status.poke.com lists App, Email, Integrations, three messaging channels and API, with two incidents from July to 12 October 2026", "Named API keys are created in Kitchen, shown once and revoked one at a time" ], "weaknesses": [ "No documented setting for which actions need approval before Poke sends, deletes or spends. Release notes mention email draft approval only in passing", "Customer content, including email contents, may train AI models unless the user selects Maximum Privacy, per the privacy notice of 11 September 2026", "Model providers, sub-processors, hosting locations and where account tokens are stored are not named in the pages read", "An API key message is processed with full access to email, calendar and integrations. Keys have no scopes", "No security.txt, disclosure policy, bug bounty or certification was found on poke.com", "The terms forbid automated access for scraping and use for benchmarking or competitive analysis. This matters before any probe is run" ], "agentNotes": [ "POST JSON to `https://poke.com/api/v1/inbound/api-message` with a Bearer key from Kitchen. Legacy `pk_` keys work only on the deprecated `/api/v1/inbound-sms/webhook`", "Expect only `{\"success\": true}` back. Poke's answer goes to the owner's message thread, not to the caller", "Do not retry a POST blindly. No idempotency key is documented, and a repeated message may make Poke act twice", "Treat an API key as full access to the owner's mail, calendar and integrations. Create one key per automation and revoke it when done", "Avoid the prefilled integration link with `apiKey` in the query string for real secrets. Enter the key in the form or use `npx poke@latest mcp add -k`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 37.6 } ], "editorialScores": { "ergonomics": 30, "maintenance": 31, "payments": 30, "reliability": 51, "schema": 42, "security": 24, "transparency": 34 }, "provenanceScore": 81 }, "connect": { "install": "npx poke@latest login", "http": "curl 'https://poke.com/api/v1/inbound/api-message' \\\n -H \"Authorization: Bearer YOUR_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"message\": \"test\"}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/poke" }, "notable": [ "The Interaction Company of California joined Cognition on 23 July 2026. Poke's release notes say the product works as before (https://poke.com/docs/release-notes; https://cognition.com/blog/interaction)", "The privacy notice says customer content may be used to train AI models, and that data from users who select Maximum Privacy will not be used for model training (https://poke.com/privacy)", "The terms grant Poke rights in user content for purposes that include training third-party AI and large language models behind the service (https://poke.com/terms, section 3)", "For Google accounts the privacy notice commits to the narrowest scopes needed, Google's Limited Use requirements, and no human reading except with agreement, for security or by law (https://poke.com/privacy)", "Messages sent through the Poke API are processed with full access to email, calendar, reminders and connected integrations (https://poke.com/docs/api)", "Poke Human, launched 25 June 2026, sends tasks such as reservations, phone calls and orders to a person. The FAQ says operators see only the task details, not chat history, memories or integrations (https://poke.com/faq)", "Account deletion is at poke.com/settings/privacy and may take up to 24 hours, with backup archives and legal holds excepted (https://poke.com/faq)", "Poke calls tools on any connected MCP server and sends `X-Poke-User-Id` on every request. A prefilled integration link accepts the server's key as `apiKey` in the query string (https://poke.com/docs/mcp-servers)", "Recipes bundle integrations and onboarding text, are reviewed before publication, and pay their creators through Kitchen payouts (https://poke.com/docs/creating-recipes; https://poke.com/terms, section 20)", "The terms forbid automated access for scraping and use of the service for benchmarking or competitive analysis (https://poke.com/terms, section 2.2)", "Since 19 March 2026 the release notes cover major updates only (https://poke.com/docs/release-notes)", "The Cognition announcement says people exchanged more than 100 million messages with Poke in three months. That is Cognition's figure (https://cognition.com/blog/interaction)" ], "area": "frameworks", "details": [ { "label": "Channels", "value": "Apple Messages, WhatsApp, Telegram and RCS, chosen at poke.com/settings/messaging. One phone number an account. Voice messages accepted, per the home page (https://poke.com/docs; https://poke.com/faq)" }, { "label": "Acts without asking", "value": "The home page says Poke uses connected services and its memory proactively, and Pro runs automations in the background. No list of actions that need approval and no approval setting was found. Release notes mention email draft approval and attachment preview before sending (https://poke.com; https://poke.com/docs/release-notes)" }, { "label": "Accounts", "value": "Gmail and Outlook mail, calendar and contacts. Recipes for Notion, Linear, Todoist, Asana, GitHub, Sentry, Vercel, Netlify, Supabase, Ramp, Webflow, Oura and others, and any MCP server by URL. Disconnect at poke.com/integrations. Where tokens are stored is not stated (https://poke.com/docs/managing-integrations)" }, { "label": "Memory and deletion", "value": "The home page and FAQ refer to Poke's memory and memories. What is kept and for how long is not documented. Delete Account at poke.com/settings/privacy, up to 24 hours, backups later (https://poke.com/faq)" }, { "label": "Where it runs", "value": "On the vendor's servers. Model providers and hosting locations are not named. Pro and Ultra are described as using frontier models. Transfers include the United States, per the privacy notice (https://poke.com/pricing; https://poke.com/privacy)" }, { "label": "Training", "value": "Customer content may train AI models unless the user selects Maximum Privacy. Google account data is held to Google's Limited Use requirements (https://poke.com/privacy)" }, { "label": "API", "value": "`POST https://poke.com/api/v1/inbound/api-message`, Bearer key, any JSON body, answers `{\"success\": true, \"message\": \"Message sent successfully\"}`. The npm SDK also creates webhook triggers (https://poke.com/docs/api; npm package `poke` 4.0.461)" }, { "label": "MCP client", "value": "Remote MCP servers by URL, with API key or OAuth. OAuth without Dynamic Client Registration needs a client ID and secret through a Kitchen template or the CLI tunnel. Local servers reach Poke through `npx poke@latest tunnel` (https://poke.com/docs/mcp-servers)" }, { "label": "Plans", "value": "Free $0, Pro $19 a month, Ultra $199 a month with credits at $1 each and Poke Human (https://poke.com/pricing)" }, { "label": "Status", "value": "status.poke.com on incident.io. Two incidents from July to 12 October 2026, a 42-minute iMessage partial outage on 22 July and a Poke Sites issue open 15 to 29 September (https://status.poke.com/history)" }, { "label": "Ownership", "value": "The Interaction Company of California Inc., 169 Waverley St, Palo Alto, per the privacy notice. Joined Cognition on 23 July 2026 (https://poke.com/privacy; https://cognition.com/blog/interaction)" } ], "unitPrices": [ { "item": "Pro", "unit": "month", "usd": 19, "note": "billed monthly, refilling usage allowance with no published figure" }, { "item": "Ultra", "unit": "month", "usd": 199, "note": "billed monthly, includes a monthly credit pool and Poke Human" }, { "item": "Ultra top-up credit", "unit": "credit", "usd": 1, "note": "1 credit is $1 of usage" } ], "provenance": { "legalEntity": "The Interaction Company of California Inc.", "domain": "poke.com", "domainRegistered": "1997-03-26", "endpointOnVendorDomain": true, "terms": "https://poke.com/terms", "privacy": "https://poke.com/privacy", "statusPage": "https://status.poke.com", "changelog": "https://poke.com/docs/release-notes", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The privacy notice (last updated 11 September 2026) names The Interaction Company of California Inc. and gives 169 Waverley St Apt B, Palo Alto, CA 94301 as the controller's address. The terms (last modified 17 March 2026) name The Interaction Company of California d/b/a Poke.", "Cognition announced on 23 July 2026 that The Interaction Company of California was joining it. The terms and privacy notice read on 12 October 2026 do not name Cognition.", "poke.com/.well-known/security.txt answered 404. poke.com/robots.txt also answered 404, so the host publishes no crawl rules.", "RDAP for poke.com gives a registration date of 1997-03-26 and NameCheap, Inc. as registrar.", "The API answers at poke.com/api/v1, on the vendor's domain." ], "score": 81, "checks": [ { "check": "Legal entity named", "value": "The Interaction Company of California Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "poke.com, registered 1997-03-26 (29 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "poke.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 4 clauses that cost points", "points": 1.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.poke.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://poke.com/terms", "state": "read", "readAt": "2026-10-12", "statedDate": "2026-03-17", "words": 11415, "points": 1.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Modified: March 17, 2026", "says": "Last updated 2026-03-17" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These Terms will be governed by the laws of the State of California, without respect to its conflict of laws principles.", "says": "The law of the State of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL ANY POKE INDEMNITEE BE LIABLE FOR ANY INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, OR DATA, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR RELAT…", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "We may, with or without prior notice, permanently terminate or temporarily suspend your access to your User Account and/or the Service without liability and for any or no reason, including if you violate any provision of these Terms." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Any change to our pricing and payment terms will become effective in the billing cycle following our provision of notice of such change.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "If you don't agree to these Terms, you may not use the Service." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "(ii) to improve our products and the Service and for our other business purposes (including but not limited to the purposes of training third-party artificial intelligence and large language models underlying the Service)", "costsPoints": true }, { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "2.2.2 use any automated or non-automated means to access the Service for \"scraping\" (except that public search engines may use spiders to create searchable indices of public materials, only as specified in the robots.txt file);", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "2.2.6 use the Service in competition with us, to develop competing products or services, for benchmarking or competitive analysis of the Service, or otherwise to our detriment or disadvantage;", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We may, with or without prior notice, change or stop providing the Service, to you or to Users generally, or create usage limits for the Service.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "You may de-activate your User Account or any Subscription at any time and we may suspend or terminate your Subscription, your User Account, or the Service at any time, in our sole discretion." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "…YOU OPT OUT PURSUANT TO THE INSTRUCTIONS IN THE ARBITRATION AGREEMENT, THE EXCLUSIVE USE OF FINAL AND BINDING ARBITRATION ON AN INDIVIDUAL BASIS TO RESOLVE DISPUTES BETWEEN YOU AND US, INCLUDING ANY CLAIMS THAT AROSE OR WERE ASSERTED BEFORE YOU AGREED TO THESE TERMS." } ], "notes": [ { "date": "2026-10-08", "text": "The right to use the service is granted for personal use only.", "quote": "you are hereby granted a non-exclusive, limited, non-transferable, and freely revocable right to access and use the Service, solely for your personal use, as permitted by the features of the Service." }, { "date": "2026-10-08", "text": "Users may not present output as human-generated or use it to train their own machine learning models.", "quote": "You shall not represent that Output was human-generated or use the Output to train your own machine learning models." }, { "date": "2026-10-08", "text": "Cancelling a subscription requires notice at least 30 days before the next subscription term starts.", "quote": "To cancel any Subscription, you must notify us at least 30 days before the start of the next Subscription Term by using the appropriate functionalities of the Service" } ] }, { "kind": "privacy", "url": "https://poke.com/privacy", "state": "read", "readAt": "2026-10-12", "statedDate": "2026-09-11", "words": 7251, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: September 11, 2026", "says": "Last updated 2026-09-11" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "The categories of personal data we collect depend on how you interact with us and our services." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We use this data to provide user-facing features of our services, and we store it only for as long as needed to provide those features or as required by law.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Please note that we regularly use third-party payment providers, including Stripe, to process payments made to us." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "•Right to Access: The right to obtain confirmation of whether we are processing personal data about you, access to and a copy of the personal data we are processing about you, and information relating to its processing, including:" }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please contact us at: legal@interaction.co.", "says": "legal@interaction.co" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "We may transfer personal data about you outside of the EEA, UK, and Switzerland, and when we do so we rely on appropriate or suitable safeguards recognized under applicable law, including adequacy decisions, standard contractual clauses, and the EU-US Data Privacy Framework.", "says": "Relies on standard contractual clauses and the Data Privacy Framework" } ], "toKnow": [ { "key": "training.optout", "label": "Says it may use customer content to train or improve models, and gives an opt-out", "found": true, "quote": "Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with, including to train our artificial intelligence models. Data from users who select Maximum Privacy will not be used for model training;" }, { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help link the personal data we and our third-party partners collect to the same person, or otherwise target advertising to an individual on a third-party website or platform." } ], "notes": [ { "date": "2026-10-08", "text": "Third-party technologies on the services may record mouse movements, scrolling, clicks and keystrokes.", "quote": "We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services" } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/poke.json", "live": { "slug": "poke", "vendorStatus": { "page": "https://status.poke.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-12T18:57:01.261625139Z" }, "updatedAt": "2026-10-12T18:57:01.261625139Z" } }, "verify": { "accepts": "a page on poke.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/poke.svg", "body": { "slug": "poke", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/poke", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/poke\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/poke.svg\" alt=\"Poke on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Poke on Anchor Terminal](https://www.anchorterminal.com/badges/poke.svg)](https://www.anchorterminal.com/tools/poke)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/poke\"\u003ePoke on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/poke", "json": "https://www.anchorterminal.com/tools/poke.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/poke.md", "slim": "https://www.anchorterminal.com/tools/poke.min.md" }, "markdown": "## Overview\n\n**Grade F · 37.6/100 · rank #955 of 986 · #15 in Personal assistants · not agent-ready · confidence medium**\n\n\n## Assessment\n\nHosted assistant that answers in Apple Messages, WhatsApp, Telegram and RCS and acts in Gmail, Outlook, calendars and MCP servers. Plan prices and a status page are public. No approval settings, credential storage, model providers or retention periods are documented, and customer content trains models unless Maximum Privacy is selected.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | The Interaction Company of California Inc. (https://poke.com) |\n| Kind | Platform |\n| Category | Personal assistants (https://www.anchorterminal.com/categories/personal-assistants) |\n| Transport | HTTP |\n| Auth | API key · A person signs up at poke.com and connects a Google or Microsoft account. The Poke API takes `Authorization: Bearer \u003ckey\u003e` with a V2 key created in Kitchen under API Keys. Keys are named, shown once, revocable one at a time and have no scopes. Older `pk_` keys work only on the deprecated endpoint. The CLI signs in with a browser device code and stores credentials in `~/.config/poke/credentials.json`. Third-party MCP servers are connected with an API key or OAuth (https://poke.com/docs/api; https://poke.com/docs/mcp-servers; https://poke.com/docs/creating-recipes). |\n| Pricing | Freemium ($19 / mo) · Free at $0 with no card. Pro is $19 a month and Ultra $199 a month on monthly billing. Free and Pro have a refilling usage allowance, with no figures published, and Poke continues in a lighter mode past it. Ultra includes a monthly credit pool (1 credit is $1 of usage), with top-ups and optional auto-reload. Poke Human is included with Ultra, with real-world expenses charged at cost. Model usage is not billed separately (https://poke.com/pricing; https://poke.com/docs/usage-and-resets; https://poke.com/faq, checked 2026-10-12). |\n| x402 | No · No x402, MPP or L402 in the docs, llms.txt or the pricing page (checked 2026-10-12). |\n| Licence | Proprietary service under Poke's Terms of Service. The `poke` npm package (CLI and Node.js SDK) declares MIT |\n| Packages | npm: `poke` |\n| Docs | https://poke.com/docs |\n| llms.txt | https://poke.com/llms.txt |\n| Last release | 2026-06-25 |\n| Channels | Apple Messages, WhatsApp, Telegram and RCS, chosen at poke.com/settings/messaging. One phone number an account. Voice messages accepted, per the home page (https://poke.com/docs; https://poke.com/faq) |\n| Acts without asking | The home page says Poke uses connected services and its memory proactively, and Pro runs automations in the background. No list of actions that need approval and no approval setting was found. Release notes mention email draft approval and attachment preview before sending (https://poke.com; https://poke.com/docs/release-notes) |\n| Accounts | Gmail and Outlook mail, calendar and contacts. Recipes for Notion, Linear, Todoist, Asana, GitHub, Sentry, Vercel, Netlify, Supabase, Ramp, Webflow, Oura and others, and any MCP server by URL. Disconnect at poke.com/integrations. Where tokens are stored is not stated (https://poke.com/docs/managing-integrations) |\n| Memory and deletion | The home page and FAQ refer to Poke's memory and memories. What is kept and for how long is not documented. Delete Account at poke.com/settings/privacy, up to 24 hours, backups later (https://poke.com/faq) |\n| Where it runs | On the vendor's servers. Model providers and hosting locations are not named. Pro and Ultra are described as using frontier models. Transfers include the United States, per the privacy notice (https://poke.com/pricing; https://poke.com/privacy) |\n| Training | Customer content may train AI models unless the user selects Maximum Privacy. Google account data is held to Google's Limited Use requirements (https://poke.com/privacy) |\n| API | `POST https://poke.com/api/v1/inbound/api-message`, Bearer key, any JSON body, answers `{\"success\": true, \"message\": \"Message sent successfully\"}`. The npm SDK also creates webhook triggers (https://poke.com/docs/api; npm package `poke` 4.0.461) |\n| MCP client | Remote MCP servers by URL, with API key or OAuth. OAuth without Dynamic Client Registration needs a client ID and secret through a Kitchen template or the CLI tunnel. Local servers reach Poke through `npx poke@latest tunnel` (https://poke.com/docs/mcp-servers) |\n| Plans | Free $0, Pro $19 a month, Ultra $199 a month with credits at $1 each and Poke Human (https://poke.com/pricing) |\n| Status | status.poke.com on incident.io. Two incidents from July to 12 October 2026, a 42-minute iMessage partial outage on 22 July and a Poke Sites issue open 15 to 29 September (https://status.poke.com/history) |\n| Ownership | The Interaction Company of California Inc., 169 Waverley St, Palo Alto, per the privacy notice. Joined Cognition on 23 July 2026 (https://poke.com/privacy; https://cognition.com/blog/interaction) |\n| Capabilities | assistant.proactive, assistant.messaging, assistant.accounts, assistant.memory, agent.mcp-client |\n| Tags | hosted, closed-source, messaging, imessage, whatsapp, telegram, gmail, outlook, mcp-client, api-key, free-tier, status-page, llms-txt, trains-on-data-by-default |\n| JSON | https://www.anchorterminal.com/api/v1/tools/poke.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-12 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 51 | 10.2 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 42 | 6.8 |\n| Agent ergonomics | 13% | 16.2 | 30 | 4.9 |\n| Security \u0026 auth | 14% | 17.5 | 24 | 4.2 |\n| Payments \u0026 pricing | 10% | 12.5 | 30 | 3.8 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 31 | 2.7 |\n| Transparency \u0026 trust (editorial 34, provenance 81) | 7% | 8.8 | 58 | 5.1 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **37.6 → F** |\n\n### Why each score\n\n- Reliability 51: Read as a hosted service. status.poke.com is an incident.io page with components for App, Email, Integrations, iMessage, WhatsApp, SMS and API, and a history view (20). Two incidents from July to 12 October 2026. On 22 July iMessage had a 42-minute partial outage attributed to an upstream provider. An issue with Poke Sites, marked degraded performance on App, stayed open from 15 to 29 September and closed with the note \"fixed it\". No core outage of an hour or more, but one incident open for two weeks (18 of 30). The API page has a rate limits heading with no numbers (0). It advises batching and delays, with no `Retry-After`, backoff figures or idempotency key (3 of 15). No SLA found (0). The release notes of 19 March 2026 call Poke generally available (10).\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 42: Graded on the Poke API, the one documented interface an outside program can call. No OpenAPI file or other machine-readable contract was found (0). poke.com/llms.txt lists seven docs pages (10). The API page states the purpose, four use cases and what happens after a message arrives (12 of 20). The body is any JSON object, forwarded whole to the assistant, with `message` shown by convention and no types or constraints (2 of 15). Examples in curl, Python and JavaScript, a response sample, and one documented error, 401 (9 of 15). The path carries `v1`. The page marks the older `/api/v1/inbound-sms/webhook` deprecated with no date. Release notes are public and have covered major updates only since March 2026 (9 of 15).\n- Agent ergonomics 30: Graded on the Poke API and the `poke` npm package. A call returns a two-field acknowledgement and the assistant's answer goes to the owner's message thread, so a calling agent cannot read the result (10 of 25). No endpoint reads conversations, memories or integrations, so there is nothing to page or filter (3 of 20). Errors documented are 401 and a `success` boolean (6 of 20). No idempotency key or retry guidance, and a repeated POST is a second instruction (2 of 20). One endpoint and one conventional field. One official SDK, for Node.js, which also creates webhook triggers (9 of 15).\n- Security \u0026 auth 24: API keys are named, created in Kitchen, shown once and revoked individually, with no scopes or expiry (20). We took 5 off, half the checklist's deduction, because the docs give a prefilled link that carries a third-party MCP server's key as `apiKey` in the query string. The secret is not Poke's own key, so not the full 10 (15 of 30). A message sent with a key is processed with full access to email, calendar and integrations. No read-only mode or approval setting is documented. Release notes mention email draft approval and attachment preview before sending, without describing a control (4 of 20). Poke reads mail, web pages and MCP tool output, and no prompt-injection guidance was found (0 of 15). API messages appear in the conversation, and MCP servers receive `X-Poke-User-Id`. No audit log is documented (3 of 15). security.txt answers 404, and no disclosure policy, bounty or certification was found on poke.com. The privacy notice commits to Google's Limited Use requirements (2 of 20).\n- Payments \u0026 pricing 30: No x402, MPP or L402 in the docs, llms.txt or pricing page (0). Plan prices are public, $0, $19 and $199 a month, and Ultra credits are $1 each. Allowances are not given in numbers and nothing is priced per call (10). The Free plan needs no card (20). A person signs up with a phone number or email and creates the key in a browser (0).\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 31: The newest product entry in the release notes is Poke Human on 25 June 2026, 109 days before the check (10 of 30). The entry of 23 July 2026 announces the move to Cognition and changes nothing in the product. Counting it would give 20. One dated entry in the last 90 days (0). A public changelog, a support address, a Discord server and a status page whose incidents close with one-line notes (8 of 15). The `poke` npm package, a CLI and Node.js SDK, reached 4.0.461 on 23 August 2026 through GitHub Actions trusted publishing, the only official SDK (8 of 15). The package declares no dependencies and links no repository (5 of 10).\n- Transparency \u0026 trust 58: Closed service with published Terms of Service, last modified 17 March 2026, naming The Interaction Company of California d/b/a Poke (15 of 30). The privacy notice of 11 September 2026 gives retention criteria and no periods. It says customer content, including email contents, may train AI models unless the user selects Maximum Privacy, and the terms allow training third-party models. Google account data is limited to user-facing functions under Google's Limited Use rules. The FAQ says account deletion takes up to 24 hours, with backups later. No DPA found (12 of 30). One endpoint is marked deprecated with no date, and no deprecation policy was found (4 of 20). Stripe and Google Analytics are named. Model providers, hosting and other sub-processors are not (3 of 20).\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (24 items): https://www.anchorterminal.com/fixes/poke.md (JSON https://www.anchorterminal.com/fixes/poke.json)\n\n### What we couldn't check\n\n- Kind is `platform`. Poke is a hosted assistant used through messaging apps, and its API is a single inbound message endpoint that returns no result, so `http-api` would overstate it. Graded as a hosted service.\n- The lead gave no docs link and described no public interface. Poke has docs at poke.com/docs, an inbound API, an npm CLI and SDK, and RCS as a fourth channel.\n- Maintenance scores recency on the Poke Human entry of 25 June 2026. Counting the Cognition notice of 23 July 2026 would add 10.\n- The Security deduction of 5 for the `apiKey` query parameter on the prefilled integration link is a judgement call. The checklist's 10 is written for a product's own credential.\n- The terms (section 2.2) forbid automated access for scraping and use for benchmarking or competitive analysis. Recorded as a fact with no deduction. It matters before any probe is run.\n- The terms and privacy notice do not mention Cognition. Whether Cognition's policies or models now apply to Poke data was not established.\n- unchecked: which actions Poke takes without approval and any approval setting, which sit in the signed-in app and were not read.\n- unchecked: the Maximum Privacy setting, its default and what else it changes. The privacy notice links the FAQ for privacy protections, and the FAQ page read has no privacy section.\n- unchecked: model providers, sub-processors, hosting region and credential storage. None is named on the pages read.\n- unchecked: OAuth scopes requested from Google and Microsoft. The privacy notice says the narrowest needed, without listing them.\n- unchecked: poke.com/health (consumer health privacy notice), poke.com/docs/merging-accounts, the recipe pages and poke.com/explore, left unread to keep to the page budget.\n- unchecked: a source repository for the `poke` npm package. The registry record links none, and no GitHub organisation was confirmed.\n- unchecked: npm weekly downloads and whether the Free plan includes API keys.\n- unchecked: security certifications. The site loads a cookie consent script from a compliance vendor, which is not evidence of a certification.\n- poke.com/robots.txt and status.poke.com/robots.txt answered 404, read as no rules. registry.npmjs.org/robots.txt answered with a package record, not a robots file, read as no rules.\n\n### Sources\n\n- home page: \u003chttps://poke.com/\u003e (seen 2026-10-12)\n- pricing: \u003chttps://poke.com/pricing\u003e (seen 2026-10-12)\n- FAQ: \u003chttps://poke.com/faq\u003e (seen 2026-10-12)\n- docs welcome: \u003chttps://poke.com/docs\u003e (seen 2026-10-12)\n- Poke API docs: \u003chttps://poke.com/docs/api\u003e (seen 2026-10-12)\n- MCP servers docs: \u003chttps://poke.com/docs/mcp-servers\u003e (seen 2026-10-12)\n- managing integrations: \u003chttps://poke.com/docs/managing-integrations\u003e (seen 2026-10-12)\n- usage and resets: \u003chttps://poke.com/docs/usage-and-resets\u003e (seen 2026-10-12)\n- release notes: \u003chttps://poke.com/docs/release-notes\u003e (seen 2026-10-12)\n- creating recipes: \u003chttps://poke.com/docs/creating-recipes\u003e (seen 2026-10-12)\n- privacy notice, last updated 11 September 2026: \u003chttps://poke.com/privacy\u003e (seen 2026-10-12)\n- terms of service, last modified 17 March 2026: \u003chttps://poke.com/terms\u003e (seen 2026-10-12)\n- llms.txt: \u003chttps://poke.com/llms.txt\u003e (seen 2026-10-12)\n- robots.txt, answered 404: \u003chttps://poke.com/robots.txt\u003e (seen 2026-10-12)\n- security.txt, answered 404: \u003chttps://poke.com/.well-known/security.txt\u003e (seen 2026-10-12)\n- status page: \u003chttps://status.poke.com/\u003e (seen 2026-10-12)\n- status history: \u003chttps://status.poke.com/history\u003e (seen 2026-10-12)\n- incident of 22 July 2026: \u003chttps://status.poke.com/incidents/01KY5B9B1TWEDKP37WHMM2V2NS\u003e (seen 2026-10-12)\n- incident of 15 to 29 September 2026: \u003chttps://status.poke.com/incidents/01M2K0VG1ZVNN7PARY1EM4VAKB\u003e (seen 2026-10-12)\n- Cognition announcement of 23 July 2026: \u003chttps://cognition.com/blog/interaction\u003e (seen 2026-10-12)\n- npm registry record for the poke package (versions, dates, README): \u003chttps://registry.npmjs.org/poke\u003e (seen 2026-10-12)\n- RDAP record for poke.com: \u003chttps://rdap.verisign.com/com/v1/domain/poke.com\u003e (seen 2026-10-12)\n- Interaction Co. page: \u003chttps://interaction.co/about\u003e (seen 2026-10-12)\n\n## Who's behind it (provenance 81/100, checked 2026-10-12)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | The Interaction Company of California Inc. | 20/20 |\n| Domain age | poke.com, registered 1997-03-26 (29 years) | 15/15 |\n| Endpoint on the vendor's domain | poke.com | 15/15 |\n| Terms of service | read, states 6 of the 7 things a reader expects, and has 4 clauses that cost points | 1.1/10 |\n| Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 |\n| Status page | status.poke.com | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | not found | 0/10 |\n\nThe privacy notice (last updated 11 September 2026) names The Interaction Company of California Inc. and gives 169 Waverley St Apt B, Palo Alto, CA 94301 as the controller's address. The terms (last modified 17 March 2026) name The Interaction Company of California d/b/a Poke.\n\nCognition announced on 23 July 2026 that The Interaction Company of California was joining it. The terms and privacy notice read on 12 October 2026 do not name Cognition.\n\npoke.com/.well-known/security.txt answered 404. poke.com/robots.txt also answered 404, so the host publishes no crawl rules.\n\nRDAP for poke.com gives a registration date of 1997-03-26 and NameCheap, Inc. as registrar.\n\nThe API answers at poke.com/api/v1, on the vendor's domain.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://poke.com/terms), read 2026-10-12, dated 2026-03-17, states 6 of the 7 things a reader expects.\n\n- To know. Says it may use customer content to train or improve models, and no opt-out was found (costs points). \"(ii) to improve our products and the Service and for our other business purposes (including but not limited to the purposes of training third-party artificial intelligence and large language models underlying the Service)\"\n- To know. Restricts automated access (costs points). \"2.2.2 use any automated or non-automated means to access the Service for \"scraping\" (except that public search engines may use spiders to create searchable indices of public materials, only as specified in the robots.txt file);\"\n- To know. Restricts benchmarking or competitive use (costs points). \"2.2.6 use the Service in competition with us, to develop competing products or services, for benchmarking or competitive analysis of the Service, or otherwise to our detriment or disadvantage;\"\n- To know. Says the terms or the service can change without notice (costs points). \"We may, with or without prior notice, change or stop providing the Service, to you or to Users generally, or create usage limits for the Service.\"\n- To know. Says access can be ended without notice or for any reason. \"You may de-activate your User Account or any Subscription at any time and we may suspend or terminate your Subscription, your User Account, or the Service at any time, in our sole discretion.\"\n- To know. Requires arbitration or waives class actions. \"…YOU OPT OUT PURSUANT TO THE INSTRUCTIONS IN THE ARBITRATION AGREEMENT, THE EXCLUSIVE USE OF FINAL AND BINDING ARBITRATION ON AN INDIVIDUAL BASIS TO RESOLVE DISPUTES BETWEEN YOU AND US, INCLUDING ANY CLAIMS THAT AROSE OR WERE ASSERTED BEFORE YOU AGREED TO THESE TERMS.\"\n- Gives the date it was last updated. Last updated 2026-03-17.\n- Names the governing law or courts. The law of the State of California.\n- States a limit on its liability. Rules out indirect and consequential losses, with no cap named in this sentence.\n- Says how changes to the terms are announced. Says it gives notice of a change.\n- Not found in the text. Refers to a service level or uptime commitment.\n- Also in the text (2026-10-08). The right to use the service is granted for personal use only. \"you are hereby granted a non-exclusive, limited, non-transferable, and freely revocable right to access and use the Service, solely for your personal use, as permitted by the features of the Service.\"\n- Also in the text (2026-10-08). Users may not present output as human-generated or use it to train their own machine learning models. \"You shall not represent that Output was human-generated or use the Output to train your own machine learning models.\"\n- Also in the text (2026-10-08). Cancelling a subscription requires notice at least 30 days before the next subscription term starts. \"To cancel any Subscription, you must notify us at least 30 days before the start of the next Subscription Term by using the appropriate functionalities of the Service\"\n\n**Privacy policy** (https://poke.com/privacy), read 2026-10-12, dated 2026-09-11, states 8 of the 8 things a reader expects.\n\n- To know. Says it may use customer content to train or improve models, and gives an opt-out. \"Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with, including to train our artificial intelligence models. Data from users who select Maximum Privacy will not be used for model training;\"\n- To know. Says it sells personal data or shares it for advertising. \"We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help link the personal data we and our third-party partners collect to the same person, or otherwise target advertising to an individual on a third-party website or platform.\"\n- Gives the date it was last updated. Last updated 2026-09-11.\n- Says how long data is kept. For as long as needed, with no period named.\n- Gives a privacy contact. legal@interaction.co.\n- Says where data is transferred or stored. Relies on standard contractual clauses and the Data Privacy Framework.\n- Also in the text (2026-10-08). Third-party technologies on the services may record mouse movements, scrolling, clicks and keystrokes. \"We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services\"\n\n## Live (updated 2026-10-12 18:57 UTC)\n\n- Vendor status page: none, All Systems Operational\n- Always current: https://www.anchorterminal.com/api/v1/live/poke.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Prices\n\n| Item | Price | Unit | Note |\n| --- | --- | --- | --- |\n| Pro | $19 | per month (plan) | billed monthly, refilling usage allowance with no published figure |\n| Ultra | $199 | per month (plan) | billed monthly, includes a monthly credit pool and Poke Human |\n| Ultra top-up credit | $1 | per credit | 1 credit is $1 of usage |\n\nAcross all listings: https://www.anchorterminal.com/prices/index.md\n\n## Strengths\n\n- Answers on Apple Messages, WhatsApp, Telegram and RCS, with the channel chosen in settings, per the docs welcome page and FAQ\n- Free plan with no card, Pro at $19 a month and Ultra at $199 a month, all published without a sign-in\n- Connects any remote MCP server by URL, with API key or OAuth, and OAuth servers with Dynamic Client Registration need no setup\n- status.poke.com lists App, Email, Integrations, three messaging channels and API, with two incidents from July to 12 October 2026\n- Named API keys are created in Kitchen, shown once and revoked one at a time\n\n## Weaknesses\n\n- No documented setting for which actions need approval before Poke sends, deletes or spends. Release notes mention email draft approval only in passing\n- Customer content, including email contents, may train AI models unless the user selects Maximum Privacy, per the privacy notice of 11 September 2026\n- Model providers, sub-processors, hosting locations and where account tokens are stored are not named in the pages read\n- An API key message is processed with full access to email, calendar and integrations. Keys have no scopes\n- No security.txt, disclosure policy, bug bounty or certification was found on poke.com\n- The terms forbid automated access for scraping and use for benchmarking or competitive analysis. This matters before any probe is run\n\n## Before you call it (notes for agents)\n\n1. POST JSON to `https://poke.com/api/v1/inbound/api-message` with a Bearer key from Kitchen. Legacy `pk_` keys work only on the deprecated `/api/v1/inbound-sms/webhook`\n2. Expect only `{\"success\": true}` back. Poke's answer goes to the owner's message thread, not to the caller\n3. Do not retry a POST blindly. No idempotency key is documented, and a repeated message may make Poke act twice\n4. Treat an API key as full access to the owner's mail, calendar and integrations. Create one key per automation and revoke it when done\n5. Avoid the prefilled integration link with `apiKey` in the query string for real secrets. Enter the key in the form or use `npx poke@latest mcp add -k`\n\n## Connect\n\nInstall:\n\n```bash\nnpx poke@latest login\n```\n\nFirst request:\n\n```bash\ncurl 'https://poke.com/api/v1/inbound/api-message' \\\n -H \"Authorization: Bearer YOUR_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"message\": \"test\"}'\n```\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| ZeroClaw | BB | 70.2 | 161 | assistant.proactive, assistant.messaging, assistant.memory, assistant.accounts, agent.mcp-client | no | https://www.anchorterminal.com/tools/zeroclaw.md |\n| NanoClaw | B | 68.3 | 229 | assistant.proactive, assistant.messaging, assistant.memory, agent.mcp-client, assistant.accounts | no | https://www.anchorterminal.com/tools/nanoclaw.md |\n| Hermes Agent | B | 67.9 | 244 | assistant.proactive, assistant.messaging, assistant.accounts, assistant.memory, agent.mcp-client | no | https://www.anchorterminal.com/tools/hermes-agent.md |\n| OpenClaw | B | 67.1 | 270 | assistant.proactive, assistant.messaging, assistant.accounts, assistant.memory, agent.mcp-client | no | https://www.anchorterminal.com/tools/openclaw.md |\n| IronClaw | B | 66.7 | 288 | assistant.proactive, assistant.messaging, assistant.accounts, assistant.memory, agent.mcp-client | no | https://www.anchorterminal.com/tools/ironclaw.md |\n| nanobot | B | 62.4 | 446 | assistant.proactive, assistant.messaging, assistant.memory, assistant.accounts, agent.mcp-client | no | https://www.anchorterminal.com/tools/nanobot.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- The Interaction Company of California joined Cognition on 23 July 2026. Poke's release notes say the product works as before (source: \u003chttps://poke.com/docs/release-notes\u003e, \u003chttps://cognition.com/blog/interaction\u003e)\n- The privacy notice says customer content may be used to train AI models, and that data from users who select Maximum Privacy will not be used for model training (source: \u003chttps://poke.com/privacy\u003e)\n- The terms grant Poke rights in user content for purposes that include training third-party AI and large language models behind the service (source: \u003chttps://poke.com/terms, section 3\u003e)\n- For Google accounts the privacy notice commits to the narrowest scopes needed, Google's Limited Use requirements, and no human reading except with agreement, for security or by law (source: \u003chttps://poke.com/privacy\u003e)\n- Messages sent through the Poke API are processed with full access to email, calendar, reminders and connected integrations (source: \u003chttps://poke.com/docs/api\u003e)\n- Poke Human, launched 25 June 2026, sends tasks such as reservations, phone calls and orders to a person. The FAQ says operators see only the task details, not chat history, memories or integrations (source: \u003chttps://poke.com/faq\u003e)\n- Account deletion is at poke.com/settings/privacy and may take up to 24 hours, with backup archives and legal holds excepted (source: \u003chttps://poke.com/faq\u003e)\n- Poke calls tools on any connected MCP server and sends `X-Poke-User-Id` on every request. A prefilled integration link accepts the server's key as `apiKey` in the query string (source: \u003chttps://poke.com/docs/mcp-servers\u003e)\n- Recipes bundle integrations and onboarding text, are reviewed before publication, and pay their creators through Kitchen payouts (source: \u003chttps://poke.com/docs/creating-recipes\u003e, \u003chttps://poke.com/terms, section 20\u003e)\n- The terms forbid automated access for scraping and use of the service for benchmarking or competitive analysis (source: \u003chttps://poke.com/terms, section 2.2\u003e)\n- Since 19 March 2026 the release notes cover major updates only (source: \u003chttps://poke.com/docs/release-notes\u003e)\n- The Cognition announcement says people exchanged more than 100 million messages with Poke in three months. That is Cognition's figure (source: \u003chttps://cognition.com/blog/interaction\u003e)\n\n- #15 of 20 in Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Compare\n\n- [AstrBot vs Poke](https://www.anchorterminal.com/compare/astrbot-vs-poke.md): C 58.8 vs F 37.6\n- [CowAgent vs Poke](https://www.anchorterminal.com/compare/cowagent-vs-poke.md): C 58.5 vs F 37.6\n- [GAIA vs Poke](https://www.anchorterminal.com/compare/gaia-vs-poke.md): D 49.5 vs F 37.6\n- [Gemini Spark vs Poke](https://www.anchorterminal.com/compare/gemini-spark-vs-poke.md): F 24.5 vs F 37.6\n- [Grok Bot vs Poke](https://www.anchorterminal.com/compare/grok-bot-vs-poke.md): E 45.2 vs F 37.6\n- [Haven vs Poke](https://www.anchorterminal.com/compare/haven-vs-poke.md): F 22.2 vs F 37.6\n- [Hermes Agent vs Poke](https://www.anchorterminal.com/compare/hermes-agent-vs-poke.md): B 67.9 vs F 37.6\n- [Instinct vs Poke](https://www.anchorterminal.com/compare/instinct-vs-poke.md): F 11.4 vs F 37.6\n- [IronClaw vs Poke](https://www.anchorterminal.com/compare/ironclaw-vs-poke.md): B 66.7 vs F 37.6\n- [Leon vs Poke](https://www.anchorterminal.com/compare/leon-vs-poke.md): E 41 vs F 37.6\n- [Lindy vs Poke](https://www.anchorterminal.com/compare/lindy-vs-poke.md): F 32.3 vs F 37.6\n- [nanobot vs Poke](https://www.anchorterminal.com/compare/nanobot-vs-poke.md): B 62.4 vs F 37.6\n- [NanoClaw vs Poke](https://www.anchorterminal.com/compare/nanoclaw-vs-poke.md): B 68.3 vs F 37.6\n- [Dots vs Poke](https://www.anchorterminal.com/compare/openai-dots-vs-poke.md): F 28.3 vs F 37.6\n- [OpenClaw vs Poke](https://www.anchorterminal.com/compare/openclaw-vs-poke.md): B 67.1 vs F 37.6\n- [PicoClaw vs Poke](https://www.anchorterminal.com/compare/picoclaw-vs-poke.md): D 46.1 vs F 37.6\n- [Poke vs QwenPaw](https://www.anchorterminal.com/compare/poke-vs-qwenpaw.md): F 37.6 vs B 62.2\n- [Poke vs ZeroClaw](https://www.anchorterminal.com/compare/poke-vs-zeroclaw.md): F 37.6 vs BB 70.2\n- [Poke vs Zo Computer](https://www.anchorterminal.com/compare/poke-vs-zo-computer.md): F 37.6 vs E 43.1\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on poke.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"poke\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/poke\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/poke.svg\" alt=\"Poke on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Poke on Anchor Terminal](https://www.anchorterminal.com/badges/poke.svg)](https://www.anchorterminal.com/tools/poke)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/poke\"\u003ePoke on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Poke is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/poke-dark.png\n- Light: https://www.anchorterminal.com/assets/share/poke-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Personal assistants", "url": "https://www.anchorterminal.com/categories/personal-assistants" }, { "name": "Poke", "url": "" } ], "description": "Hosted personal assistant from The Interaction Company of California, reached by text on Apple Messages, WhatsApp, Telegram and RCS. It works across the owner's Gmail or Outlook mail, calendar, contacts and connected apps.", "facts": [ "rank #955 of 986", "API key auth", "0 desk reviews" ], "h1": "Poke", "image": "https://www.anchorterminal.com/assets/og/tools-poke.png", "path": "/tools/poke", "published": "2026-10-01", "section": "tools", "title": "Poke review (2026): pricing, alternatives and grade F", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/tools/poke" }, "tokens": { "markdown": 8500, "slim": 1930 }, "version": 1 }