Skip to contentAbnormal MCP Server MCP Server | MCPpediaAAbnormal MCP Server MCP Server
Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.
52FairInstall
~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"gregdog-mcp-server-abnormal": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
],
"env": {
"ABNORMAL_API_TOKEN": "YOUR_ABNORMAL_API_TOKEN",
"ABNORMAL_BASE_URL": "https://api.abnormalplatform.com/v1",
"ABNORMAL_ALLOW_RESPONSE": "false",
"ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "false",
"ABNORMAL_MAX_EVIDENCE_BYTES": "10485760"
}
}
}
}
Related servers
FMCP server for Firecrawl — web search, scraping, and biomedical/arXiv paper search.
Environment
| Name | Required | Notes |
|---|
| ABNORMAL_API_TOKEN | Yes | Abnormal REST API bearer token Secret. |
| ABNORMAL_BASE_URL | No | Abnormal API base URL |
| ABNORMAL_ALLOW_RESPONSE | No | Enable response MCP tools (remediation) |
| ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD | No | Enable evidence download MCP tools (EML and attachments) |
| ABNORMAL_MAX_EVIDENCE_BYTES | No | Max bytes per evidence download from Abnormal |
Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.
FAQ
- What is Abnormal MCP Server?
- Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.
- How do I install Abnormal MCP Server?
- Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
- Is Abnormal MCP Server official?
- No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
- How is the trust score calculated?
- This listing scores 52 (Fair). The formula is published on the methodology page.
Reviews
0 published · no average
Sign in to review this server.
Good
Search, read, annotate, and add to your Zotero research library, local or web.
HLocal-first agentic RAG with citations - hybrid search, reranking, multimodal document retrieval
MLocal-first, cloud-friendly memory — 100+ tools, 99.2% LongMemEval-S retrieval@8, hybrid search.
DCrawl documentation sites into local corpora agents can search, read, and diff fully offline.
XReal-time data-breach lookup and analytics for emails and domains from XposedOrNot.