nophi.sh MCP Server

by nophi Your server? Claim it

answering

nophi.sh is answering right now. Last checked 11 min ago. It exposes 9 tools.

Public facts on nophi.sh, phishing-awareness training for French SMBs: catalogue, prices, security.

Uptime history 38 hours of history

38 hours agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

440 ms

Response time

average over 24h

open, no key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check nophi.sh every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add nophish --transport http https://app.nophi.sh/mcp

Settings → Connectors → Add custom connector, then paste this address

https://app.nophi.sh/mcp

~/.codex/config.toml

[mcp_servers.nophish]
url = "https://app.nophi.sh/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "nophish": {
      "url": "https://app.nophi.sh/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "nophish": {
      "type": "http",
      "url": "https://app.nophi.sh/mcp"
    }
  }
}

Available tools 9

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

compare

compare_fit

Fit check for one company. Inputs, all optional: company size, mail provider, up to 20 needs. Returns the plan for the size (Enterprise on quote above the largest plan), the mail prerequisites for the provider, and a status per need: covered, not_covered (SMS, phone/vishing, attachment and ransomware-encryption simulations, with the related training), see_facts, or unknown (no public fact; contact address given); plus the known gaps and the trial link.

courses

list_courses

Security-awareness course catalogue grouped by theme (essentials, fraud and money, attack channels, everyday habits, industry): per course the title, description, number of lessons, duration in minutes, quiz questions and passing score; also how courses are assigned after a click, and the practice exercise. Optional filter: theme.

deliverability

get_deliverability_prerequisites

Mail-system configuration needed for simulation e-mails to reach inboxes, per provider: Microsoft 365 (Advanced Delivery, with the sending IPs and domains), Google Workspace and OVH (guidance on request); plus the option of sending from the company's own domain or mailbox. Optional filter: mail_provider.

overview

get_overview

Summary of nophi.sh, a phishing-awareness training service for French SMBs: target audience, capabilities, the 5-step workflow, catalogue sizes (simulation templates per language, QR-code templates, courses, course themes), features not included, free trial terms and the free team quiz. Public facts; no account needed.

pricing

get_pricing

Plans with their user limits and prices in EUR excluding VAT (monthly, and billed annually), the Enterprise tier (on quote, above the largest plan), and the free trial terms (14 days, no card) with the signup link.

security

get_security_and_data

Security questionnaire answers with their date: hosting (France), backups, subprocessors (name, country, purpose), encryption in transit and at rest, passwords on simulated login pages (not collected), employee data processed, retention periods, exports. Topics outside this list are not covered by this server; the answer includes the contact address for them.

simulation

list_simulation_templates

E-mail phishing simulation templates in one language: name, category, difficulty, QR-code flag, titles of the red flags employees learn to spot, and the course assigned to repeat clickers. Metadata only (no e-mail bodies, no links). Optional filters: category, difficulty. Paginated: limit (1-100, default 20) and offset; the result includes total and next_offset.

start

start_trial_link

Signup URL of the 14-day free trial (no card) and the steps a person completes: sign up and verify their e-mail address; simulations can only target their own company's e-mail domain. Returns a link only: creates no account and sends no e-mail.

template

get_template_categories

Categories of phishing simulation templates: key, label, template counts per language and per difficulty, and the course assigned to repeat clickers; also the total and QR-code template counts. The category keys are the values accepted by the category filter of list_simulation_templates.

Endpoints

URL	Transport	State	Latency	Checked
https://app.nophi.sh/mcp	streamable-http	answering	202 ms	11 min ago

Alternatives to nophi.sh

same job, measured the same way

KnowBe4

by wyre-ai

MCP server for KnowBe4 security awareness training — users, groups, training, phishing campaigns.

local only

KnowBe4

by wyre-technology

MCP server for KnowBe4 security awareness training — users, groups, training, phishing campaigns.

local only

Fallax

by fallax

Fallax is a phishing simulation and security awareness training platform. Read your results.

answering

DATA/AGENT FOUNDRY

by reztek-creator

Free catalogue; paid historical software/security evidence. No current-risk assessment.

answering

Service Public France

by onenicolas

French public services: tax, property, admin, education, healthcare, security, risks, legal texts

38 tools answering

NSW Licences

by fisher98kim

Check licences on 15 NSW public registers: trades, property, security, liquor, WHS and more.

local only

mcpprobe

by mcpprobe

Read-only MCP security data: check catalogue, public scan status and your own scan reports.

answering

Chain Signer

by kevthetech143

Security suite for AI agents: flag drains, permit-phishing & risky actions before signing.

601 installs/wk local only

nophi.sh — questions

Answers built from our own checks of this server.

What can nophi.sh do?

It exposes 9 tools, read directly from the server on our last check. Among them: compare_fit, get_deliverability_prerequisites, get_overview, get_pricing, get_security_and_data, get_template_categories and 3 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is nophi.sh working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 440 ms. The bar chart above shows every period we have measured.

How do I connect nophi.sh?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does nophi.sh need an API key?

No. nophi.sh completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 9 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is nophi.sh?

It answers our handshake in 440 ms on average, which is faster than 28% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.