Microsoft Scout vs Poke (2026)

Microsoft Scout

by Microsoft

Poke

by The Interaction Company of California

Pros

• ✓Genuine local execution. Scout reads and writes files, runs shell commands, builds and tests, and drives a browser on the user's own machine, then acts on Microsoft 365 data in the same session. Two unattended modes extend that: Heartbeat checks in every 15 to 120 minutes and Automations run on a schedule or a trigger.
• ✓A three-tier shell permission system gives fine-grained control. Read-only commands auto-approve, write and network commands pause for approval, and destructive commands are blocked outright. Administrators can disable whole capability categories or force approval for every non-read action through Group Policy.
• ✓Model choice is inherited from GitHub Copilot rather than fixed, so an administrator decides which Microsoft, third-party and open-source models Scout may use. Scout also acts as a Model Context Protocol client, connecting out to tool servers for capability beyond Microsoft 365.

Limitations

• ⚠Access is gated twice and both gates are administrator-controlled. The organization must be enrolled in the Frontier program, and an administrator must deploy an Intune policy and file an attestation. Every user also needs a GitHub Copilot Business or Enterprise seat, so no individual can obtain Scout without IT.
• ⚠Scout is prerelease software. Microsoft marks the documentation prerelease and states that preview features may have restricted functionality and may not be released for general availability. Microsoft publishes no price for Scout and no Scout-specific usage rates, so total running cost cannot be established in advance.
• ⚠There is no independent review corpus yet. Microsoft Scout has no G2 profile, so a buyer weighing it has nothing to set against Microsoft's own description of the product.

Pros

• ✓First AI agent approved for Apple Messages for Business, on 4 June 2026, giving it native iMessage presence in the default messaging app rather than requiring a separate download.
• ✓Open-ended integration surface: users connect their own Model Context Protocol servers, which Poke then discovers and calls, extended by a community recipe marketplace and a verified server template.
• ✓Fully public, self-serve pricing with a genuinely permanent free tier that needs no credit card, and a documented Maximum Privacy setting that excludes a user's data from model training.

Limitations

• ⚠A personal assistant with no admin console, single sign-on, audit logging or centralized user management, and no published security certifications, so it does not fit organizations with governance requirements.
• ⚠Poke is an MCP client, not an MCP server, so external AI assistants cannot connect into Poke, and the useful integrations depend on users or developers running their own servers.
• ⚠Independent evidence is thin, with a Product Hunt listing carrying only a small number of community reviews and no G2 or Capterra presence, which makes reliability at scale hard to assess.