SERVER

Abnormal MCP Server

Rank #29,344

io.github.GregDog/mcp-server-abnormal

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

2 versions

by GregDog (2 servers)View repository ↗

First listed

Sep 10, 2026

Last publish date

Sep 17, 2026

PURPOSE

What you can do with Abnormal MCP Server

Abnormal MCP Server is a Model Context Protocol (MCP) server published by GregDog. It ranks #29,344 of 168,415 active servers on MCP Toplist. Abnormal MCP Server is listed across 2 registries — Official MCP and Glama, with 2 tracked versions. It was first listed on Sep 10, 2026 and most recently updated on Sep 17, 2026.

Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.

CAPABILITIES AND LIMITATIONS

What Abnormal MCP Server can and cannot do

Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.

REQUIREMENTS

What you need before using Abnormal MCP Server

DeclaredAPI keyCredentials declared

The registry listing declares required configuration before first use — typically an API key, token or connection string set via environment variables.

Declared by Glama, last synced Nov 4, 2026. Not independently verified by MCP Toplist.

Declared in the registry install config

ABNORMAL_API_TOKEN · required
ABNORMAL_BASE_URL · optional
ABNORMAL_ALLOW_RESPONSE · optional
ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD · optional
ABNORMAL_MAX_EVIDENCE_BYTES · optional

INSTALLATION AND FIRST TASK

Connect Abnormal MCP Server and confirm it works

Docker image

claude mcp add mcp-server-abnormal -e "ABNORMAL_API_TOKEN=<your ABNORMAL_API_TOKEN>" -e "ABNORMAL_BASE_URL=<your ABNORMAL_BASE_URL>" -e "ABNORMAL_ALLOW_RESPONSE=<your ABNORMAL_ALLOW_RESPONSE>" -e "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>" -e "ABNORMAL_MAX_EVIDENCE_BYTES=<your ABNORMAL_MAX_EVIDENCE_BYTES>" -- docker run -i --rm ghcr.io/gregdog/mcp-server-abnormal:v1.1.0 serve

Replace each placeholder with your own value before saving.

Docker image

[mcp_servers.mcp-server-abnormal]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0", "serve"]

[mcp_servers.mcp-server-abnormal.env]
ABNORMAL_API_TOKEN = "<your ABNORMAL_API_TOKEN>"
ABNORMAL_BASE_URL = "<your ABNORMAL_BASE_URL>"
ABNORMAL_ALLOW_RESPONSE = "<your ABNORMAL_ALLOW_RESPONSE>"
ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD = "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>"
ABNORMAL_MAX_EVIDENCE_BYTES = "<your ABNORMAL_MAX_EVIDENCE_BYTES>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

Docker image

{
  "servers": {
    "mcp-server-abnormal": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0",
        "serve"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "ABNORMAL_BASE_URL": "<your ABNORMAL_BASE_URL>",
        "ABNORMAL_ALLOW_RESPONSE": "<your ABNORMAL_ALLOW_RESPONSE>",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your ABNORMAL_MAX_EVIDENCE_BYTES>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

First successful task

After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.

ALTERNATIVES

When to choose another server

Other servers by GregDog

Openlane MCP Server#11,797

View all GregDog servers →

No task-specific alternatives are catalogued for Abnormal MCP Serveryet; the list above is its publisher's other servers.

MAINTENANCE AND EVIDENCE

What changed, and when this was checked

First listed: Sep 10, 2026
Latest version published: Sep 17, 2026
Version history: 2 versions tracked (below)
Requirements evidence: Declared by Glama, last synced Nov 4, 2026. Not independently verified by MCP Toplist.
Profile checked: Not yet — purpose, capabilities and requirements above come from registry data only
Ranking data as of: Nov 4, 2026

Registry sightings

Official MCP ↗listed since Sep 11, 2026 · still listed
Glama ↗listed since Sep 11, 2026 · still listed

Do you maintain Abnormal MCP Server? to correct or enrich this profile.

VERSIONS

Available versions (2)

Version	Published
1.1.0	Sep 17, 2026
1.0.1	Sep 10, 2026

STANDING

#29,344of 168,415 active serversTop 25%

Ranks ahead of 139,071 of 168,415 servers on MCP Toplist.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.GregDog%2Fmcp-server-abnormal.svg)](https://mcptoplist.com/server/io.github.GregDog%2Fmcp-server-abnormal)

HTML

<a href="https://mcptoplist.com/server/io.github.GregDog%2Fmcp-server-abnormal"><img src="https://mcptoplist.com/badge/io.github.GregDog%2Fmcp-server-abnormal.svg" alt="MCP Toplist: Top 25% of 168,415" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

FAQ

Frequently asked questions

Who maintains Abnormal MCP Server?: Abnormal MCP Server is maintained by GregDog, which publishes 2 MCP servers (7 total versions) tracked on MCP Toplist.
Is Abnormal MCP Server listed on the Official MCP Registry?: Yes — Abnormal MCP Server is listed on the Official MCP Registry, alongside Glama.
How many versions does Abnormal MCP Server have?: MCP Toplist tracks 2 versions of Abnormal MCP Server, most recently published on Sep 17, 2026.
Where can I find the source code for Abnormal MCP Server?: The source code for Abnormal MCP Server is hosted at github.com/GregDog/mcp-server-abnormal.

Used in projects

Do you run this server?

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers