iMessage Bridge for Poke
Enables reading and sending iMessages through Poke via a local Mac server, with tools for chat management and message history.
README
<div align="center">
๐ฌ iMessage Bridge for Poke
Text Poke to read and send your iMessages.
A tiny server runs on your Mac, Poke reaches it over a private tunnel, and a menu bar switch turns it on and off. Your messages stay on your Mac โ only what you ask Poke to read or send ever leaves it.
โฌ๏ธ Download ยท โก Quick start ยท ๐ How it works ยท โ FAQ
</div>
What it feels like
You: what did the last person text me? Poke: Sarah said "running 10 late, order me a flat white" โ want me to reply? You: yeah tell her got it ๐ Poke: Sent โ
You're texting an assistant that can actually reach into your real iMessages โ from your phone, from anywhere, as long as your Mac is awake.
How it works
your phone Poke cloud your Mac (awake)
โโโโโโโโโโโโ โโโโโโโโโโโโ private tunnel โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ text โ โโโโโโโถ โ Poke โ โโโโโโโโโโโโโโโโโโถ โ FastMCP server :8765 โ
โ "Pokeโฆ" โ โ (LLM) โ โโโโโโโโโโโโโโโโโโ โ โโถ imsg CLI โถ Messages.app โ
โโโโโโโโโโโโ โโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
Poke is an MCP host: it discovers the tools your server exposes and calls
them mid-conversation. The server wraps imsg,
a CLI that reads your local chat.db and drives Messages.app.
Each person runs their own copy. Recipe links are not shareable โ a shared link would point Poke at your Mac and your texts. Share the repo, not your link.
Quick start
Prerequisites: macOS 12+, Homebrew, and a Poke account.
Option A โ download the app (easiest)
- โฌ๏ธ Download the latest release and unzip it.
- Right-click
Install iMessage Bridge.appโ Open โ Open. (Needed once โ the app is unsigned, so macOS asks you to confirm.) - A Terminal window runs the setup and walks you through the rest.
Option B โ one command
bash <(curl -fsSL https://raw.githubusercontent.com/ish-cs/imessage-poke-bridge/main/install.sh)
<details> <summary>Option C โ clone the repo</summary>
git clone https://github.com/ish-cs/imessage-poke-bridge.git
cd imessage-poke-bridge
./install.sh
</details>
However you install, it sets everything up for your account: deps (imsg,
Node, poke CLI, uv), the server + tunnel as background services, logs you
into your Poke, mints your recipe link, and adds the menu bar app. Every
install is fully self-contained โ your Poke talks to your Mac, nobody else's.
Two permissions you must grant
macOS requires these and no installer can do them for you:
| Permission | Why | How |
|---|---|---|
| Full Disk Access | read your Messages database | The installer prints a Python path and opens the pane โ add it with + (or โโงG to paste the path) and toggle it on |
| Automation โ Messages | send texts | A dialog pops up the first time it sends โ click Allow |
Then click iMSG โ in your menu bar (โ = off) and start texting Poke.
Using it
Text Poke naturally:
- "what did mom text me?"
- "tell Sarah I'm running 10 min late"
- "what did I miss today?"
- "send the photo at ~/Desktop/ticket.png to the group"
Works whenever your Mac is awake. Lid closed / asleep = the bridge is dark until you wake it. (We deliberately don't keep your Mac awake โ your battery thanks us.)
Tools
| Tool | What it does |
|---|---|
list_chats |
recent conversations + chat_id + resolved contact name |
read_history |
messages in a chat (group senders resolved to names) |
search_messages |
full-text search your history |
find_contact |
name โ phone/email, so "text Mom" works |
whois |
is a handle reachable on iMessage |
catch_up |
"what did I miss" across recent chats in one call |
send_message |
send a text |
send_attachment |
send an image/file (+ optional text) |
react |
tapback the latest message |
bridge_status |
self-diagnose: health, contacts, send count, recipe link |
Contact names come from your local AddressBook โ covered by the Full Disk Access grant, so no extra Contacts permission.
Menu bar app
| Item | Action |
|---|---|
| Turn On / Off | start/stop the bridge (iMSG โ on, iMSG โ off) |
| Copy Recipe Link | your personal Poke link |
| Open Logs Folder | ~/.imsg-bridge |
Auto-starts at login and self-restarts if it crashes.
Configuration
Set in the launchd plist or environment:
| Variable | Default | Purpose |
|---|---|---|
IMSG_SEND_LIMIT |
30 |
max sends per hour |
IMSG_SEND_ALLOWLIST |
(unset) | comma-separated handles; if set, only those can be texted |
IMSG_POKE_USER_ID |
(set by installer) | your Poke account id โ the server only accepts requests carrying it. Set automatically at install; don't change it |
IMSG_MCP_TOKEN |
(unset) | bearer token โ set this only if you expose the server on a public URL; leave unset for the private Poke tunnel |
Safety & privacy
- Locked to your Poke account. Poke sends an
X-Poke-User-Idon every request; the server only accepts your id (captured at install from your Poke login). Even if your recipe link leaked, someone else's Poke โ a different user id โ is rejected outright. The installer refuses to set up an unlocked bridge. The server also binds to127.0.0.1, so it's only reachable through your own private Poke tunnel, never the open internet. - Audit log โ every send is appended to
~/.imsg-bridge/sends.jsonl. Review exactly what Poke did in your name. - Rate limit + allowlist โ guard rails on the send tools (see Configuration).
- Local-first โ messages stay on your Mac; only what Poke acts on is sent to it.
โ ๏ธ Anything in your messages โ secrets, 2FA codes, private notes โ becomes readable by Poke (an LLM). Don't text yourself API keys, and rotate any that are already in your history.
Troubleshooting
| Symptom | Fix |
|---|---|
| Menu bar icon missing | It runs as a LaunchAgent; check launchctl list | grep imsgbridge. Re-run ./install.sh if absent. |
| Poke says "offline / no available upstreams" | The tunnel isn't running. Click the menu bar item โ Turn On, or check ~/.imsg-bridge/tunnel.log. |
| "can't read messages" | Full Disk Access isn't granted to the Python binary the installer printed. |
| Sends fail silently | Grant Automation โ Messages (System Settings โ Privacy & Security โ Automation). |
| Poke can't reach it | Your Mac is asleep. Wake it. |
| Duplicate integrations in Poke | Delete extras at poke.com/settings; keep one. |
Logs live in ~/.imsg-bridge/ (server.log, tunnel.log, menubar.log).
Uninstall
./uninstall.sh
Removes the services, menu bar app, and files. Revoke Full Disk Access manually
in System Settings, and remove the integration at poke.com/settings if you want.
Limitations
- Your Mac must be awake. iMessage only exists on your Mac; there's no free cloud option (a cloud Mac costs $100+/mo).
- SIP-on features only. Typing indicators, read receipts, edit/unsend, polls, and rich effects need SIP disabled and are intentionally not exposed.
- Not notarized yet. MVP installs from source.
- Contact matching is by last-10-digits, so some international numbers may mismatch.
FAQ
Does Poke get all my messages? No. The bridge only reads or sends when Poke calls a tool โ i.e. when you ask it to. It doesn't stream your history anywhere. (That said, content Poke does read is processed by an LLM โ see Safety & privacy.)
Can someone else use my link to read my texts?
No. The server is locked to your Poke account via the X-Poke-User-Id Poke
attaches to every request โ another person's Poke is rejected even if they
somehow got your link. On top of that, the server only listens on localhost and
is reachable only through your own private tunnel. The thing you share is the
app/installer: each person who installs it gets their own server, tunnel, and
link wired to their Mac and their Poke. Installs are fully isolated.
Why does my Mac have to be awake? iMessage only lives on your Mac. There's no cloud copy to talk to, so when the Mac sleeps, Poke can't reach it. We don't force it awake โ that's your battery's call.
Is it safe to run an unsigned app? The source is all here and the installer is a readable shell script โ inspect both. The "unidentified developer" warning is just because it isn't notarized yet (roadmap); right-click โ Open acknowledges that once.
Does this need SIP disabled? No. It uses only the features that work with System Integrity Protection on.
How do I turn it off?
Click the menu bar item โ Turn Off, or run ./uninstall.sh to remove it entirely.
Roadmap
- [ ] Signed + notarized
.dmginstaller โ clean double-click, no warning - [ ] Dependency-free Swift/Go rewrite โ no Homebrew/Python/Node needed
Architecture
server.py FastMCP server wrapping imsg โ 10 tools, stateless HTTP,
path-prefix shim for Poke's /<id>/mcp routing, optional bearer auth,
AddressBook contact resolution, send audit + rate limit.
menubar.py pyobjc menu bar controller for the launchd services.
install.sh per-user setup: deps, services, recipe capture, menu bar agent.
uninstall.sh teardown.
License
MIT ยฉ Ishaan Pandey
<div align="center"> <sub>Built on <a href="https://github.com/steipete/imsg">imsg</a> ยท <a href="https://gofastmcp.com">FastMCP</a> ยท <a href="https://modelcontextprotocol.io">MCP</a>. Not affiliated with Apple or Poke.</sub> </div>
Recommended Servers
playwright-mcp
A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.
Magic Component Platform (MCP)
An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.
Audiense Insights MCP Server
Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.
VeyraX MCP
Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.
graphlit-mcp-server
The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.
Kagi MCP Server
An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.
E2B
Using MCP to run code via e2b.
Neon Database
MCP server for interacting with Neon Management API and databases
Exa Search
A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.
Qdrant Server
This repository is an example of how to create a MCP server for Qdrant, a vector search engine.