Unphish now has an MCP server. Clients can connect an AI assistant that supports MCP to their Unphish account and query their cases, threats and brands directly.
What MCP Is
MCP (Model Context Protocol) is an open standard for connecting AI assistants to other systems. With an MCP connection, the assistant reads data straight from the source system, so your team no longer has to copy and paste information into a chat. It works with any AI assistant that supports MCP, such as Claude, ChatGPT and Cursor.
Asking an AI assistant about Unphish cases
What’s waiting on our review, highest priority first?
Three cases are waiting on your review.
P1solsticepay-verify.topCASE-20261104-7F3A21
P2instagram.com/solsticepay.helpCASE-20261103-2B9C04
P2solsticepay-rewards.shopCASE-20261103-A41D7E
From your Unphish data
Example data for a fictional brand.
What the Assistant Can Access
The assistant works with the same data your team sees in the Unphish platform.
CasesEvery case for your organisation, including the case number, target URL, issue type, priority and where it sits in the workflow. Cases can be filtered by date, and the assistant can page through your full case history.NewAnalyst reviewWaiting on client reviewEnforcement submittedIn progressClosed
Case detail and timelineThe full record for any case, plus its timeline of what happened and when, from detection through to enforcement and closure.
ThreatsThe threats in your Threat Feed, so the assistant can see what has been detected and is waiting on review.
BrandsThe brands protected under your account, so results can be grouped or filtered by brand.
What Your Team Can Do with It
Because the assistant works with the underlying data, it can do the analysis as well as the lookup.
01
Work the review queueAsk what’s waiting on your review, sorted by priority, and get the list with target URLs and case numbers.
02
Track enforcementSee which cases have enforcement submitted or in progress, and check a case’s timeline to see where it’s up to.
03
Report on activityGet a breakdown of cases by status, issue type, priority or brand over any date range, ready to drop into a monthly report or board update.
04
Investigate a casePull the full detail and history of a single case without searching for it in the portal.
05
Spot patternsAsk the assistant to group cases by domain, target URL or issue type to see whether threats are related.
06
Combine with your other toolsIf your assistant is connected to other systems, such as ticketing or messaging tools, it can bring Unphish data into the same workflow, for example drafting an internal update on open phishing cases.
Access and Security
Sign in with your Unphish accountThe connection uses OAuth, so there are no API keys to create or share.
One organisation per connectionEach connection is scoped to a single organisation, and the sign-in screen shows which one is being connected.
Read-only unless you allow changesThe option to allow changes is off by default.
Visible and revocableConnected assistants are listed under Connected apps in the Unphish platform, with recent activity. Access can be revoked there at any time.
Getting Started
To set up an MCP connection for your organisation, contact your Unphish account manager or get in touch with our team.
