nophi.sh

Read-only facts about nophi.sh, phishing-awareness training for French SMBs: simulation and course catalogue, prices, security and data answers, mail prerequisites, fit check.

Hosted MCP Server

npx add-mcp 'https://app.nophi.sh/mcp'

Installs into Claude Code, Codex, Cursor and more

Documentation

For AI agents

nophi.sh runs a public MCP server for AI agents that help a company choose its phishing-awareness solution. The agent gets what nophi.sh does, its catalogues, its pricing and its security answers, drawn from production data and from facts checked by the team.

MCP server address

https://app.nophi.sh/mcp

  • Streamable HTTP
  • No account
  • Read-only
  • Answers in English or French

Connect to the server

The address is all you need, no key or sign-up. The server works with any MCP client that supports Streamable HTTP.

Claude Code

claude mcp add --transport http nophish https://app.nophi.sh/mcp

JSON configuration

{
  "mcpServers": {
    "nophish": {
      "type": "http",
      "url": "https://app.nophi.sh/mcp"
    }
  }
}

For a client that reads an mcpServers block, such as a Claude Code project's .mcp.json file.

The 9 tools

Every tool takes a language parameter, "en" or "fr", and answers in that language. Start with get_overview.

get_overview What nophi.sh does and who it is for, how it works in 5 steps, catalogue sizes, the free trial and the team quiz.

list_simulation_templates Parameters: category, difficulty, limit, offset The e-mail phishing simulation catalogue: name, category, difficulty, QR code and the red flags to spot.

get_template_categories Simulation families, template counts per language and difficulty, and the course matched to each family.

list_courses Parameters: theme Training courses by theme: lessons, duration, quiz and passing score, and how they are assigned after a click.

get_pricing Plans with user limits and prices excl. VAT, monthly or billed annually, Enterprise on quote, and the free trial.

get_security_and_data Security questionnaire answers: hosting in France, backups, subprocessors, data processed, retention, exports.

get_deliverability_prerequisites Parameters: mail_provider The mail settings that get simulations into inboxes: Microsoft 365, Google Workspace, OVH.

compare_fit Parameters: company_size, mail_provider, needs Fit for a given company: the plan for its size, its mail system's prerequisites and an answer for each of its needs.

start_trial_link The sign-up link for the 14-day free trial, to hand to the person who will create the account.

Example call

A 40-person company on Microsoft 365 wants to train its teams against CEO fraud.

Call

{
  "name": "compare_fit",
  "arguments": {
    "language": "en",
    "company_size": 40,
    "mail_provider": "microsoft_365",
    "needs": [
      "CEO fraud"
    ]
  }
}

Answer (excerpt)

{
  "plan": {
    "name": "Starter",
    "max_users": 50,
    "display": "€99/month excl. VAT, or €79.20/month billed annually (€950.40/year excl. VAT)"
  },
  "needs": [
    {
      "need": "CEO fraud",
      "status": "covered",
      "related_training": [
        "CEO fraud: the urgent request from the boss",
        "Fake bank details and invoice fraud"
      ]
    }
  ],
  "trial": {
    "statement": "14-day free trial, no card required."
  }
}

Create an account

A person at the company creates the nophi.sh account. The agent hands them the link returned by start_trial_link.

  1. They sign up at app.nophi.sh/register: 14-day free trial, no credit card.
  2. They confirm their e-mail address.
  3. They launch their first simulations to addresses on their company's e-mail domain.

Start the free trial

REST API for customers

nophi.sh customers run their organisation from a script or an agent: employees, campaigns and results, training, reported e-mails.

Base URL https://app.nophi.sh/api/v1

Docs app.nophi.sh/api/v1/docs

Keys Created in Settings › API access, for one organisation

Scopes read, write (employees, campaign drafts, training) and launch (launching a campaign)

Example

curl https://app.nophi.sh/api/v1/me \
  -H "Authorization: Bearer $NOPHISH_API_KEY"

Questions?

For questions about the MCP server or the API, email contact@nophi.sh. The full profile of nophi.sh for language models is at /llms.txt.