MCP server

Abnormal MCP Server

io.github.GregDog/mcp-server-abnormal

Checked 26 Oct 2026, 08:31 UTC · Checked against OSV.dev for malware and vulnerabilities; never run by us

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

Website Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add mcp-server-abnormal --env ABNORMAL_API_TOKEN=YOUR_VALUE -- docker run -i --rm -e ABNORMAL_API_TOKEN ghcr.io/gregdog/mcp-server-abnormal:v1.1.0

Claude Desktop

{"mcpServers":{"mcp-server-abnormal":{"command":"docker","args":["run","-i","--rm","-e","ABNORMAL_API_TOKEN","ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"],"env":{"ABNORMAL_API_TOKEN":"YOUR_VALUE"}}}}

Codex (config.toml)

[mcp_servers.mcp-server-abnormal]
command = "docker"
args = ["run","-i","--rm","-e","ABNORMAL_API_TOKEN","ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"]
env = { ABNORMAL_API_TOKEN = "YOUR_VALUE" }

Gemini CLI

{"mcpServers":{"mcp-server-abnormal":{"command":"docker","args":["run","-i","--rm","-e","ABNORMAL_API_TOKEN","ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"],"env":{"ABNORMAL_API_TOKEN":"YOUR_VALUE"}}}}

Cursor

{"mcpServers":{"mcp-server-abnormal":{"command":"docker","args":["run","-i","--rm","-e","ABNORMAL_API_TOKEN","ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"],"env":{"ABNORMAL_API_TOKEN":"YOUR_VALUE"}}}}

VS Code

{"servers":{"mcp-server-abnormal":{"type":"stdio","command":"docker","args":["run","-i","--rm","-e","ABNORMAL_API_TOKEN","ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"],"env":{"ABNORMAL_API_TOKEN":"YOUR_VALUE"}}}}

Runs on your computer with your permissions: check the package and its source before installing. Replace YOUR_VALUE with your own ABNORMAL_API_TOKEN.

Browse

• GitHub tools
• GitHub and code hosting

Related MCP servers

• Security Recipes
  Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.
• Raziel
  MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
• Polyform
  Pay-per-call data APIs for AI agents. USDC on Base via x402. 33 tools, no signup.
• Sectora
  Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.
• Outage.Me
  Live cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA
• RegSentry Website Tracking Inspector
  Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.
• Jeevesus — DugganUSA threat-intel MCP
  Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.
• SignalTender B2B, GovCon & LegalTech MCP Server
  B2B, GovCon & LegalTech MCP server for live RFPs, contract parsing, compliance & proposal tools.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.GregDog/mcp-server-abnormal.svg)](https://aptlynx.net/servers/io.github.GregDog/mcp-server-abnormal)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents