Poke guide

Connect FlightSweeper to Poke

Use FlightSweeper from Apple Messages, Telegram, WhatsApp, and RCS through Poke while keeping identity, compliance, approval, traveler data, and payment on FlightSweeper.

OAuth setup supported

Poke connects to FlightSweeper with OAuth authorization code, PKCE, rotating refresh tokens, and an owner-scoped access token. The client never receives passenger identity or payment data.

Best for

Poke users who want conversational flight search and booking-intent handoff without giving the messaging assistant payment or ticketing authority.

Starter prompt

Use FlightSweeper to search live flights for this trip. Show the all-in total, quote time, expiry, refund terms, and FlightSweeper's role. Create a booking intent only after I choose, then send me the FlightSweeper approval link.

Setup flow

Every client uses the same Streamable HTTP endpoint and the same nine public tools. Booking intents return canonical state; approval and payment stay hosted.

FlightSweeper publishes OAuth discovery and Dynamic Client Registration. OAuth access tokens expire after 10 minutes, refresh tokens rotate, and the connection can be revoked from FlightSweeper.

1

Open the FlightSweeper integration in Poke and confirm the server URL is https://flightsweeper.com/api/agent/mcp.

2

Authorize Poke with FlightSweeper OAuth. FlightSweeper—not the Poke user header—binds the connection to your owner account.

3

Confirm Poke discovers exactly nine tools and does not list create_checkout_link, book_flight, payment, or ticketing tools.

4

Start with search, comparison, quote details, refresh, preferences, and status before creating a booking intent.

5

Open every approval or checkout URL on FlightSweeper. Never send passenger identity or card data through Poke.

Tool permissions

Every client should keep the same transaction boundary: search can happen in the agent, but booking happens after the traveler confirms a hosted checkout page.

Fare-bearing results include all-in total, currency, quotedAt, expiresAt, and refresh state.
create_booking_intent is idempotent and cannot charge or ticket; request_human_approval sends the traveler to FlightSweeper.
cancel_booking_intent applies only to approved, unpaid intents. Paid-order servicing and refunds stay hosted.
Booking status, policy summaries, and opaque traveler summaries are scoped to the authenticated owner.