Skip to content

For AI agents

nophi.sh runs a public MCP server for AI agents that help a company choose its phishing-awareness solution. The agent gets what nophi.sh does, its catalogues, its pricing and its security answers, drawn from production data and from facts checked by the team.

MCP server address

https://app.nophi.sh/mcp
  • Streamable HTTP
  • No account
  • Read-only
  • Answers in English or French

Connect to the server

The address is all you need, no key or sign-up. The server works with any MCP client that supports Streamable HTTP.

Claude Code 
claude mcp add --transport http nophish https://app.nophi.sh/mcp
JSON configuration 
{
  "mcpServers": {
    "nophish": {
      "type": "http",
      "url": "https://app.nophi.sh/mcp"
    }
  }
}

For a client that reads an mcpServers block, such as a Claude Code project's .mcp.json file.

The 9 tools

Every tool takes a language parameter, "en" or "fr", and answers in that language. Start with get_overview.

get_overview
What nophi.sh does and who it is for, how it works in 5 steps, catalogue sizes, the free trial and the team quiz.
list_simulation_templates Parameters: category, difficulty, limit, offset
The e-⁠mail phishing simulation catalogue: name, category, difficulty, QR code and the red flags to spot.
get_template_categories
Simulation families, template counts per language and difficulty, and the course matched to each family.
list_courses Parameters: theme
Training courses by theme: lessons, duration, quiz and passing score, and how they are assigned after a click.
get_pricing
Plans with user limits and prices excl. VAT, monthly or billed annually, Enterprise on quote, and the free trial.
get_security_and_data
Security questionnaire answers: hosting in France, backups, subprocessors, data processed, retention, exports.
get_deliverability_prerequisites Parameters: mail_provider
The mail settings that get simulations into inboxes: Microsoft 365, Google Workspace, OVH.
compare_fit Parameters: company_size, mail_provider, needs
Fit for a given company: the plan for its size, its mail system's prerequisites and an answer for each of its needs.
start_trial_link
The sign-up link for the 14-day free trial, to hand to the person who will create the account.

Example call

A 40-person company on Microsoft 365 wants to train its teams against CEO fraud.

Call 
{
  "name": "compare_fit",
  "arguments": {
    "language": "en",
    "company_size": 40,
    "mail_provider": "microsoft_365",
    "needs": [
      "CEO fraud"
    ]
  }
}
Answer (excerpt) 
{
  "plan": {
    "name": "Starter",
    "max_users": 50,
    "display": "€99/month excl. VAT, or €79.20/month billed annually (€950.40/year excl. VAT)"
  },
  "needs": [
    {
      "need": "CEO fraud",
      "status": "covered",
      "related_training": [
        "CEO fraud: the urgent request from the boss",
        "Fake bank details and invoice fraud"
      ]
    }
  ],
  "trial": {
    "statement": "14-day free trial, no card required."
  }
}

Create an account

A person at the company creates the nophi.sh account. The agent hands them the link returned by start_trial_link.

  1. They sign up at app.nophi.sh/register: 14-day free trial, no credit card.

  2. They confirm their e-⁠mail address.

  3. They launch their first simulations to addresses on their company's e-⁠mail domain.

Start the free trial

REST API for customers

nophi.sh customers run their organisation from a script or an agent: employees, campaigns and results, training, reported e-⁠mails.

Base URL
https://app.nophi.sh/api/v1
Docs
app.nophi.sh/api/v1/docs
Keys
Created in Settings › API access, for one organisation
Scopes
read, write (employees, campaign drafts, training) and launch (launching a campaign)
Example 
curl https://app.nophi.sh/api/v1/me \
  -H "Authorization: Bearer $NOPHISH_API_KEY"

Questions?

For questions about the MCP server or the API, email contact@nophi.sh. The full profile of nophi.sh for language models is at /llms.txt.