nophi.sh

Connect Remote server

claude mcp add --transport http nophish https://app.nophi.sh/mcp

{
  "mcpServers": {
    "nophish": {
      "url": "https://app.nophi.sh/mcp"
    }
  }
}

{
  "servers": {
    "nophish": {
      "type": "http",
      "url": "https://app.nophi.sh/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://app.nophi.sh/mcp

Tools 9 found in our last check

• get_overview

  Summary of nophi.sh, a phishing-awareness training service for French SMBs: target audience, capabilities, the 5-step workflow, catalogue sizes (simulation templates per language, QR-code templates, courses, course themes), features not included, free trial terms and the free te…

• list_simulation_templates

  E-mail phishing simulation templates in one language: name, category, difficulty, QR-code flag, titles of the red flags employees learn to spot, and the course assigned to repeat clickers. Metadata only (no e-mail bodies, no links). Optional filters: category, difficulty. Pagina…

• get_template_categories

  Categories of phishing simulation templates: key, label, template counts per language and per difficulty, and the course assigned to repeat clickers; also the total and QR-code template counts. The category keys are the values accepted by the category filter of list_simulation_t…

• list_courses

  Security-awareness course catalogue grouped by theme (essentials, fraud and money, attack channels, everyday habits, industry): per course the title, description, number of lessons, duration in minutes, quiz questions and passing score; also how courses are assigned after a clic…

• get_pricing

  Plans with their user limits and prices in EUR excluding VAT (monthly, and billed annually), the Enterprise tier (on quote, above the largest plan), and the free trial terms (14 days, no card) with the signup link.

• get_security_and_data

  Security questionnaire answers with their date: hosting (France), backups, subprocessors (name, country, purpose), encryption in transit and at rest, passwords on simulated login pages (not collected), employee data processed, retention periods, exports. Topics outside this list…

• get_deliverability_prerequisites

  Mail-system configuration needed for simulation e-mails to reach inboxes, per provider: Microsoft 365 (Advanced Delivery, with the sending IPs and domains), Google Workspace and OVH (guidance on request); plus the option of sending from the company's own domain or mailbox. Optio…

• compare_fit

  Fit check for one company. Inputs, all optional: company size, mail provider, up to 20 needs. Returns the plan for the size (Enterprise on quote above the largest plan), the mail prerequisites for the provider, and a status per need: covered, not_covered (SMS, phone/vishing, att…

• start_trial_link

  Signup URL of the 14-day free trial (no card) and the steps a person completes: sign up and verify their e-mail address; simulations can only target their own company's e-mail domain. Returns a link only: creates no account and sends no e-mail.

Details

More security servers See all

• BlackVeil DNS & Email Security Scanner

  DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

• Forwardsmith buyer desk (read-only)

  Read-only desk for buyers and assistants: offer, prices, fit check, readiness scan, intake draft.

• MakeItSay

  Change the words in a screenshot or photo and keep the original font and layout.

• Kestrova Solidity Security Scan

  Free Slither scan of Solidity contracts for AI coding agents; optional paid report (1 USDC, x402).

• Paragon Boxing & BJJ Gear Advisor

  Read-only boxing and BJJ gear guidance, sizing, product comparison, rules and identity checks.

• Spurvik EU AI Act

  Live URL scan, AI Act risk check, 24-EU-language Art. 50 badge, HMAC receipts & approval gates.