SERVER

Abnormal MCP Server

Rank #19,043

io.github.GregDog/mcp-server-abnormal

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

2 versions

by GregDog (2 servers)View repository ↗Claim this server

First listed

Sep 10, 2026

Last publish date

Sep 17, 2026

OVERVIEW

Abnormal MCP Server is a Model Context Protocol (MCP) server published by GregDog. It ranks #19,043 of 132,113 servers tracked on MCP Toplist. Abnormal MCP Server is listed across 2 registries — Official MCP and Glama, with 2 tracked versions. It was first listed on Sep 10, 2026 and most recently updated on Sep 17, 2026.

STANDING

#19,043of 132,113 tracked serversTop 25%

Ranks ahead of 113,070 of 132,113 servers on MCP Toplist.

CONNECT

Use Abnormal MCP Server

API keyNeeds credentials

Requires user-supplied configuration before first use — typically an API key, token or connection string set via environment variables.

Docker image

claude mcp add mcp-server-abnormal -e "ABNORMAL_API_TOKEN=<your ABNORMAL_API_TOKEN>" -e "ABNORMAL_BASE_URL=<your ABNORMAL_BASE_URL>" -e "ABNORMAL_ALLOW_RESPONSE=<your ABNORMAL_ALLOW_RESPONSE>" -e "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>" -e "ABNORMAL_MAX_EVIDENCE_BYTES=<your ABNORMAL_MAX_EVIDENCE_BYTES>" -- docker run -i --rm ghcr.io/gregdog/mcp-server-abnormal:v1.1.0 serve

Replace each placeholder with your own value before saving.

Docker image

[mcp_servers.mcp-server-abnormal]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0", "serve"]

[mcp_servers.mcp-server-abnormal.env]
ABNORMAL_API_TOKEN = "<your ABNORMAL_API_TOKEN>"
ABNORMAL_BASE_URL = "<your ABNORMAL_BASE_URL>"
ABNORMAL_ALLOW_RESPONSE = "<your ABNORMAL_ALLOW_RESPONSE>"
ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD = "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>"
ABNORMAL_MAX_EVIDENCE_BYTES = "<your ABNORMAL_MAX_EVIDENCE_BYTES>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

Docker image

{
  "servers": {
    "mcp-server-abnormal": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.GregDog%2Fmcp-server-abnormal.svg)](https://mcptoplist.com/server/io.github.GregDog%2Fmcp-server-abnormal)

HTML

<a href="https://mcptoplist.com/server/io.github.GregDog%2Fmcp-server-abnormal"><img src="https://mcptoplist.com/badge/io.github.GregDog%2Fmcp-server-abnormal.svg" alt="MCP Toplist: Top 25% of 132,113" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

REGISTRIES

Listed on 2 registries

Official MCP

Glama

ORGANIZATION

GregDog

Organization

GregDog

Servers in org

Versions across org

Other servers by GregDog

Openlane MCP Server#12,596 · 1 ver

View all GregDog servers →

VERSIONS

Available versions (2)

Version	Published
1.1.0	Sep 17, 2026
1.0.1	Sep 10, 2026

FAQ

Frequently asked questions

Who maintains Abnormal MCP Server?: Abnormal MCP Server is maintained by GregDog, which publishes 2 MCP servers (3 total versions) tracked on MCP Toplist.
Is Abnormal MCP Server listed on the Official MCP Registry?: Yes — Abnormal MCP Server is listed on the Official MCP Registry, alongside Glama.
How many versions does Abnormal MCP Server have?: MCP Toplist tracks 2 versions of Abnormal MCP Server, most recently published on Sep 17, 2026.
Where can I find the source code for Abnormal MCP Server?: The source code for Abnormal MCP Server is hosted at github.com/GregDog/mcp-server-abnormal.

Used in projects

Do you run this server?

Add to a project

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers