CharlesTheGreat77/mcpy-gophish

Gophish MCP Server

An MCP (Model Context Protocol) server that provides AI assistants with direct access to Gophish API functions for phishing simulation campaigns.

⚠️ Disclaimer

This tool is for authorized security testing only. Only use on systems you own or have explicit permission to test.

Setup

1. Create config.json:

   {
       "api": "your_gophish_api_key",
       "base_url": "https://localhost:3333/api",
       "verify_ssl": true
   }
   

2. Run the server:

   uv run main.py
   

• optionally with mcpo: uvx mcpo --port 8000 -- uv run main.py

What it does

This MCP server exposes Gophish API functions so AI assistants can:

• Templates: Create, read, update, delete email templates
• SMTP Profiles: Manage sending profiles
• Landing Pages: Create pages and import existing sites
• Groups: Manage target recipient groups
• Campaigns: Create, launch, and monitor phishing campaigns

Key Features

• Error handling for API calls
• Works with any MCP-compatible AI assistant
• Direct mapping to Gophish API endpoints

Usage Example

Once connected to an AI assistant through MCP:

"Create a appealing email template called 'Sign Off Email' for my company EXAMPLE to sign off on the access forms at http://127.0.0.1"
...
"Create a landing page called 'Sign Off Landing Page' that takes a name and email for the sign off template, and enable capturing credentials"
...
"Create a campaign named 'Access Form Campaign' with the created template and landing page to the target group 'HR Department' with the sending profile 'Default'."
...
"Add 'example@email.com' with first name John, last name Doe to the 'Default' sending profile."
...
"List the templates and landing pages"
...

The AI can then call the appropriate functions to set up the campaign automatically.