poke-around

mcp
Security Audit
Fail
Health Warn
  • License — License: MPL-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Fail
  • execSync — Synchronous shell command execution in examples/agents/battery.30m.js
  • process.env — Environment variable access in examples/agents/battery.30m.js
  • process.env — Environment variable access in examples/agents/beeper.1h.js
  • network request — Outbound network request in examples/agents/beeper.1h.js
  • execSync — Synchronous shell command execution in examples/agents/context.30m.js
  • execSync — Synchronous shell command execution in examples/agents/music.10m.js
  • execSync — Synchronous shell command execution in examples/agents/screentime.24h.js
  • execSync — Synchronous shell command execution in examples/agents/wifi.30m.js
  • rm -rf — Recursive force deletion command in scripts/install.sh
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

let poke use your computer, with macos, linux and windows support.

README.md

Poke Around

Let your Poke AI assistant access your machine.

A community project — not affiliated with Poke or The Interaction Company.

Latest Release
License
Platform


Run Poke Around on your machine, then message Poke from iMessage, Telegram, or SMS to run commands, read files, take screenshots, and more — all on your machine.

Install

Install script (macOS / Linux)

curl -fsSL https://raw.githubusercontent.com/undivisible/poke-around/main/scripts/install.sh | bash

Install script (Windows PowerShell)

irm https://raw.githubusercontent.com/undivisible/poke-around/main/scripts/install.ps1 | iex

Installs to %LOCALAPPDATA%\Programs\poke-around\poke-around.exe unless POKE_AROUND_BIN is set.

Homebrew (macOS / Linux)

brew tap undivisible/tap
brew install poke-around

If install fails at brew link for simdjson (a dependency of Homebrew node), your prefix still has an older simdjson linked. Unlink it, then retry:

brew unlink simdjson
brew install poke-around

If Brew already poured a newer simdjson but could not link it, either run brew link --overwrite simdjson and retry, or brew reinstall simdjson after brew unlink simdjson.

Build from source

Requires stable Rust:

git clone https://github.com/undivisible/poke-around.git
cd poke-around
./scripts/install.sh
git clone https://github.com/undivisible/poke-around.git
cd poke-around
.\scripts\install.ps1

On macOS/Linux this installs to ~/.local/bin/poke-around unless POKE_AROUND_BIN is set. On Windows it installs to %LOCALAPPDATA%\Programs\poke-around\.

Manual download

Download the latest archive for your platform from Releases, extract it, and place poke-around or poke-around.exe on your PATH.

On macOS, if the binary is blocked by Gatekeeper:

xattr -cr poke-around

Usage

poke-around          # start the daemon (opens browser for OAuth on first run)
poke-around --verbose  # show tool calls in real time
poke-around --mode limited
poke-around --mode sandbox

Config is stored at ~/.config/poke-around/config.json.

Access modes

Mode Description
full (default) All tools, no approval required.
limited Read-only tools plus a curated set of safe commands (ls, cat, grep, curl, etc.).
sandbox Broader command support, with destructive patterns blocked and write/delete/UI mutation tools requiring approval or blocked by policy.
poke-around --mode sandbox
# or
POKE_GATE_PERMISSION_MODE=limited poke-around

Running as a service

macOS (Homebrew)

brew services start poke-around

Linux (systemd)

# ~/.config/systemd/user/poke-around.service
[Unit]
Description=Poke Around Daemon
After=network.target

[Service]
ExecStart=%h/.local/bin/poke-around
Restart=always

[Install]
WantedBy=default.target
systemctl --user daemon-reload
systemctl --user enable --now poke-around

Agents

Agents are scheduled JS scripts in ~/.config/poke-around/agents/ named <name>.<interval>.js:

File Runs
beeper.1h.js every hour
health.10m.js every 10 minutes

Minimum interval is 10 minutes. Agents can import the poke SDK and send messages back via poke.sendMessage(...).

import { Poke, getToken } from "poke";
const poke = new Poke({ apiKey: getToken() });
await poke.sendMessage("Hello from my agent!");

Per-agent secrets go in ~/.config/poke-around/agents/.env.<name>.

Configuration

Poke Around uses rs_poke for authentication and tunneling. Credentials are stored at ~/.config/poke/credentials.json.

Variable Description
POKE_API Poke API base URL (default: https://poke.com/api/v1)
POKE_API_KEY API key (optional if logged in via device flow)
POKE_FRONTEND Frontend URL for device login (default: https://poke.com)
POKE_CLIENT_ID OAuth client ID for MCP connections (optional)
POKE_CLIENT_SECRET OAuth client secret for MCP connections (optional)

Security

In full mode, Poke Around grants full shell access to your Poke agent. Only run it on machines and networks you trust. Use limited or sandbox mode for tighter restrictions.

See SECURITY.md for the vulnerability disclosure policy.

Credits

License

MPL-2.0

Reviews (0)

No results found