protogrid

Search / sh.nophi/nophish

nophi.sh

R0· no sign-in

Public facts on nophi.sh, phishing-awareness training for French SMBs: catalogue, prices, security.

v1.0.2 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality96strong
Trust83of 100
Uptime, 30 days100%
Latency p50744 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "nophish": {
      "type": "http",
      "url": "https://app.nophi.sh/mcp"
    }
  }
}
claude mcp add --transport http nophish https://app.nophi.sh/mcp
[mcp_servers.nophish]
url = "https://app.nophi.sh/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nophish": {
      "type": "remote",
      "url": "https://app.nophi.sh/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "nophish": {
      "type": "http",
      "url": "https://app.nophi.sh/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=nophish&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBwLm5vcGhpLnNoL21jcCJ9"
}
{
  "servers": {
    "nophish": {
      "type": "http",
      "url": "https://app.nophi.sh/mcp"
    }
  }
}
{
  "mcpServers": {
    "nophish": {
      "httpUrl": "https://app.nophi.sh/mcp"
    }
  }
}
extensions:
  "nophish":
    enabled: true
    name: "nophish"
    type: streamable_http
    uri: "https://app.nophi.sh/mcp"
    timeout: 300

Quality 96 / 100strong

protocol88 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • warn
    protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 2,175 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
  • pass
    tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
  • pass
    stability.new_linksno tool change named a new site
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

9 tools, about 2,175 tokens to load them all · tool set 203eb41667c6 · checked 2026-11-14 06:30 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-5d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://app.nophi.sh/mcp streamable-httpnoneyes100%744 ms2026-07-282026-11-14

Tools (9)

compare_fitread-onlyFit check for one company. Inputs, all optional: company size, mail provider, up to 20 needs. Returns the plan for the size (Enterprise on quote above the largest plan), the mail prerequisites for the provider, and a status per need: covered, not_covered (SMS, phone/vishing, attachment and ransomware-encryption simulations, with the related training), see_facts, or unknown (no public fact; contact address given); plus the known gaps and the trial link.
get_deliverability_prerequisitesread-onlyMail-system configuration needed for simulation e-mails to reach inboxes, per provider: Microsoft 365 (Advanced Delivery, with the sending IPs and domains), Google Workspace and OVH (guidance on request); plus the option of sending from the company's own domain or mailbox. Optional filter: mail_provider.
get_overviewread-onlySummary of nophi.sh, a phishing-awareness training service for French SMBs: target audience, capabilities, the 5-step workflow, catalogue sizes (simulation templates per language, QR-code templates, courses, course themes), features not included, free trial terms and the free team quiz. Public facts; no account needed.
get_pricingread-onlyPlans with their user limits and prices in EUR excluding VAT (monthly, and billed annually), the Enterprise tier (on quote, above the largest plan), and the free trial terms (14 days, no card) with the signup link.
get_security_and_dataread-onlySecurity questionnaire answers with their date: hosting (France), backups, subprocessors (name, country, purpose), encryption in transit and at rest, passwords on simulated login pages (not collected), employee data processed, retention periods, exports. Topics outside this list are not covered by this server; the answer includes the contact address for them.
get_template_categoriesread-onlyCategories of phishing simulation templates: key, label, template counts per language and per difficulty, and the course assigned to repeat clickers; also the total and QR-code template counts. The category keys are the values accepted by the category filter of list_simulation_templates.
list_coursesread-onlySecurity-awareness course catalogue grouped by theme (essentials, fraud and money, attack channels, everyday habits, industry): per course the title, description, number of lessons, duration in minutes, quiz questions and passing score; also how courses are assigned after a click, and the practice exercise. Optional filter: theme.
list_simulation_templatesread-onlyE-mail phishing simulation templates in one language: name, category, difficulty, QR-code flag, titles of the red flags employees learn to spot, and the course assigned to repeat clickers. Metadata only (no e-mail bodies, no links). Optional filters: category, difficulty. Paginated: limit (1-100, default 20) and offset; the result includes total and next_offset.
start_trial_linkread-onlySignup URL of the 14-day free trial (no card) and the steps a person completes: sign up and verify their e-mail address; simulations can only target their own company's e-mail domain. Returns a link only: creates no account and sends no e-mail.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "sh.nophi/nophish",
  "icons": [
    {
      "src": "https://nophi.sh/icon-512.png",
      "sizes": [
        "512x512"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "nophi.sh",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://app.nophi.sh/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.2",
  "websiteUrl": "https://nophi.sh/en/ai-agents?utm_source=mcp-registry&utm_medium=directory",
  "description": "Public facts on nophi.sh, phishing-awareness training for French SMBs: catalogue, prices, security."
}