MCP HeartbeatTHE MCP OBSERVATORY
Public workspace

Explore

Evidence for your next connection.

Independent measurements of remote MCP servers. Every observation has a timestamp.

Read-only probes

MCP server · Other

nophi.sh

Public facts on nophi.sh, phishing-awareness training for French SMBs: catalogue, prices, security.

Checks passed
13 / 22

1 failed · 8 not measured

Median response
964 ms

Median of successful probes over 7 days

30-day uptime
Not measured

Share of countable probes over 30 days, including daily rollups. Auth challenges are excluded.

Discovered tools
9

Tool definitions returned by this server

Independent monitoring

Health & checks

Status history

Outdated check

Last connection measurement is over 24 hours old. Current availability is unknown.

Last checked
Check summary by test group
Test areaPassedFailedUnmeasured
ConnectionCan a client connect and discover tools?
500
Reliability & speedDoes it respond consistently and quickly?
004
Access & authenticationWhat is required to use this server?
102
Tool qualityAre the tool definitions usable by an agent?
400
Publisher identityCan the publisher be traced to its source?
312

Unmeasured means there is not enough evidence to decide. How these checks work

Inspect individual checks 22 recorded

Core

  • Pass
    Reachable

    Latest probe returned HTTP 200 in 964 ms.

  • Pass
    Valid handshake

    protocolVersion 2025-11-25, serverInfo.name nophish.

  • Pass
    Lists tools

    tools/list returned 9 tools.

  • Pass
    Current protocol

    Negotiated 2025-11-25. The bar is 2025-06-18 or newer.

  • Pass
    HTTPS

    The endpoint URL is https.

Performance

  • Not measured
    Fast (p50)

    Median latency 964 ms over 1 samples in 7 days. The bar is 1000 ms. Need at least 5 samples.

  • Not measured
    Consistent (p95)

    95th percentile 964 ms over 1 samples in 7 days. The bar is 3000 ms. Need at least 20 samples.

  • Not measured
    Reliable (uptime)

    1 of 1 attempts returned a tool list in 30 days (100%). The bar is 99%. Need at least 30 samples.

  • Not measured
    Stable tool list

    Fewer than two successful probes in 30 days, so tool-list stability is not measured.

Access

  • Pass
    Open access

    tools/list succeeded with no credential, and the record declares none.

  • Not measured
    Standard auth

    Auth is not required, so the OAuth metadata check does not apply.

  • Not measured
    Free tier cited

    No publisher quote has been checked.

Tools

  • Pass
    Tools described

    Every tool description is at least 20 characters.

  • Pass
    Valid input schemas

    Every inputSchema is a JSON Schema object.

  • Pass
    Parameters documented

    18 of 18 parameters have a description (100%). The bar is 80%.

  • Pass
    Safety hints

    Every tool sets readOnlyHint or destructiveHint.

Publisher

  • Pass
    Verified namespace

    Listed in the Official MCP Registry.

  • Pass
    Website matches publisher

    The website host matches the reverse-domain namespace.

  • Fail
    Source repo linked

    No repository URL is on file.

  • Not measured
    Repo owner matches

    This namespace is not an io.github login, so the owner comparison does not apply.

  • Pass
    Recently updated

    Updated 2026-11-09T18:12:38.949371Z, within 180 days.

  • Not measured
    Open-source licence

    No GitHub repository to ask about a licence.

Start using nophi.sh

Connect to this server

Choose your client, copy the configuration, then enable the server in your client’s MCP settings.

Run this command in your terminal, then restart Claude Code.

Claude Code

claude mcp add --transport http nophi-sh https://app.nophi.sh/mcp

Capabilities

Tools 9

compare_fit

Fit check for one company. Inputs, all optional: company size, mail provider, up to 20 needs. Returns the plan for the size (Enterprise on quote above the largest plan), the mail prerequisites for the provider, and a status per need: covered, not_covered (SMS, phone/vishing, attachment and ransomware-encryption simulations, with the related training), see_facts, or unknown (no public fact; contact address given); plus the known gaps and the trial link.

Discovered
get_deliverability_prerequisites

Mail-system configuration needed for simulation e-mails to reach inboxes, per provider: Microsoft 365 (Advanced Delivery, with the sending IPs and domains), Google Workspace and OVH (guidance on request); plus the option of sending from the company's own domain or mailbox. Optional filter: mail_provider.

Discovered
get_overview

Summary of nophi.sh, a phishing-awareness training service for French SMBs: target audience, capabilities, the 5-step workflow, catalogue sizes (simulation templates per language, QR-code templates, courses, course themes), features not included, free trial terms and the free team quiz. Public facts; no account needed.

Discovered
get_pricing

Plans with their user limits and prices in EUR excluding VAT (monthly, and billed annually), the Enterprise tier (on quote, above the largest plan), and the free trial terms (14 days, no card) with the signup link.

Discovered
get_security_and_data

Security questionnaire answers with their date: hosting (France), backups, subprocessors (name, country, purpose), encryption in transit and at rest, passwords on simulated login pages (not collected), employee data processed, retention periods, exports. Topics outside this list are not covered by this server; the answer includes the contact address for them.

Discovered
get_template_categories

Categories of phishing simulation templates: key, label, template counts per language and per difficulty, and the course assigned to repeat clickers; also the total and QR-code template counts. The category keys are the values accepted by the category filter of list_simulation_templates.

Discovered
list_courses

Security-awareness course catalogue grouped by theme (essentials, fraud and money, attack channels, everyday habits, industry): per course the title, description, number of lessons, duration in minutes, quiz questions and passing score; also how courses are assigned after a click, and the practice exercise. Optional filter: theme.

Discovered
list_simulation_templates

E-mail phishing simulation templates in one language: name, category, difficulty, QR-code flag, titles of the red flags employees learn to spot, and the course assigned to repeat clickers. Metadata only (no e-mail bodies, no links). Optional filters: category, difficulty. Paginated: limit (1-100, default 20) and offset; the result includes total and next_offset.

Discovered
start_trial_link

Signup URL of the 14-day free trial (no card) and the steps a person completes: sign up and verify their e-mail address; simulations can only target their own company's e-mail domain. Returns a link only: creates no account and sends no e-mail.

Discovered

Recent measurements

Probe history

View status
Latest stored probes. Raw probe rows are kept for 14 days.
CheckedResultResponseTools
Connected964 ms9