SERVER

Abnormal Security

Rank #8,137

io.github.WYRE-AI/abnormal-mcp

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

15 versions

by wyre-technology (60 servers)View repository ↗

First listed

Mar 2, 2026

Last publish date

Oct 14, 2026

PURPOSE

What you can do with Abnormal Security

Abnormal Security is a Model Context Protocol (MCP) server published by wyre-technology. It ranks #8,137 of 144,396 active servers on MCP Toplist. Abnormal Security is listed across 2 registries — Official MCP and PulseMCP, with 15 tracked versions. It was first listed on Mar 2, 2026 and most recently updated on Oct 14, 2026.

Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.

CAPABILITIES AND LIMITATIONS

What Abnormal Security can and cannot do

Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.

REQUIREMENTS

What you need before using Abnormal Security

DeclaredAPI keyCredentials declared

The registry listing declares required configuration before first use — typically an API key, token or connection string set via environment variables.

Declared by the Official MCP Registry, last synced Oct 16, 2026. Not independently verified by MCP Toplist.

Declared in the registry install config

ABNORMAL_API_TOKEN · required
MCP_TRANSPORT · optional
AUTH_MODE · optional
LOG_LEVEL · optional

INSTALLATION AND FIRST TASK

Connect Abnormal Security and confirm it works

Docker image

claude mcp add abnormal-mcp -e "ABNORMAL_API_TOKEN=<your ABNORMAL_API_TOKEN>" -e "MCP_TRANSPORT=<your MCP_TRANSPORT>" -e "AUTH_MODE=<your AUTH_MODE>" -e "LOG_LEVEL=<your LOG_LEVEL>" -- docker run -i --rm ghcr.io/wyre-ai/abnormal-mcp:v1.2.7

Replace each placeholder with your own value before saving.

Docker image

[mcp_servers.abnormal-mcp]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/wyre-ai/abnormal-mcp:v1.2.7"]

[mcp_servers.abnormal-mcp.env]
ABNORMAL_API_TOKEN = "<your ABNORMAL_API_TOKEN>"
MCP_TRANSPORT = "<your MCP_TRANSPORT>"
AUTH_MODE = "<your AUTH_MODE>"
LOG_LEVEL = "<your LOG_LEVEL>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "abnormal-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/abnormal-mcp:v1.2.7"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "MCP_TRANSPORT": "<your MCP_TRANSPORT>",
        "AUTH_MODE": "<your AUTH_MODE>",
        "LOG_LEVEL": "<your LOG_LEVEL>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "abnormal-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/abnormal-mcp:v1.2.7"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "MCP_TRANSPORT": "<your MCP_TRANSPORT>",
        "AUTH_MODE": "<your AUTH_MODE>",
        "LOG_LEVEL": "<your LOG_LEVEL>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

Docker image

{
  "servers": {
    "abnormal-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/abnormal-mcp:v1.2.7"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "MCP_TRANSPORT": "<your MCP_TRANSPORT>",
        "AUTH_MODE": "<your AUTH_MODE>",
        "LOG_LEVEL": "<your LOG_LEVEL>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "abnormal-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/abnormal-mcp:v1.2.7"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "MCP_TRANSPORT": "<your MCP_TRANSPORT>",
        "AUTH_MODE": "<your AUTH_MODE>",
        "LOG_LEVEL": "<your LOG_LEVEL>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "abnormal-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/abnormal-mcp:v1.2.7"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<your ABNORMAL_API_TOKEN>",
        "MCP_TRANSPORT": "<your MCP_TRANSPORT>",
        "AUTH_MODE": "<your AUTH_MODE>",
        "LOG_LEVEL": "<your LOG_LEVEL>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

First successful task

After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.

ALTERNATIVES

When to choose another server

Other servers by wyre-technology

View all wyre-technology servers →

No task-specific alternatives are catalogued for Abnormal Securityyet; the list above is its publisher's other servers.

MAINTENANCE AND EVIDENCE

What changed, and when this was checked

First listed: Mar 2, 2026
Latest version published: Oct 14, 2026
Version history: 15 versions tracked (below)
Requirements evidence: Declared by the Official MCP Registry, last synced Oct 16, 2026. Not independently verified by MCP Toplist.
Profile checked: Not yet — purpose, capabilities and requirements above come from registry data only
Ranking data as of: Oct 14, 2026

Registry sightings

Official MCP ↗listed since May 7, 2026 · still listed
PulseMCP ↗listed since May 22, 2026 · still listed
Official MCP ↗listed since Aug 27, 2026 · still listed

Do you maintain Abnormal Security? to correct or enrich this profile.

VERSIONS

Available versions (15)

Version	Published
1.2.7	Oct 14, 2026
1.2.6	Aug 26, 2026
1.2.5	Aug 20, 2026
1.2.4	Aug 20, 2026
1.2.3	Aug 20, 2026
1.2.2	Aug 13, 2026
1.2.1	Aug 7, 2026
1.2.0	Jul 17, 2026
1.1.8	Jul 1, 2026
1.1.7	Jun 12, 2026
1.1.6	Jun 12, 2026
1.1.5	May 22, 2026
1.0.0	May 21, 2026
1.1.4	May 21, 2026
1.1.3	May 6, 2026

STANDING

#8,137of 144,396 active serversTop 10%

Ranks ahead of 136,259 of 144,396 servers on MCP Toplist.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.WYRE-AI%2Fabnormal-mcp.svg)](https://mcptoplist.com/server/io.github.WYRE-AI%2Fabnormal-mcp)

HTML

<a href="https://mcptoplist.com/server/io.github.WYRE-AI%2Fabnormal-mcp"><img src="https://mcptoplist.com/badge/io.github.WYRE-AI%2Fabnormal-mcp.svg" alt="MCP Toplist: Top 10% of 144,396" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

FAQ

Frequently asked questions

Who maintains Abnormal Security?: Abnormal Security is maintained by wyre-technology, which publishes 60 MCP servers (872 total versions) tracked on MCP Toplist.
Is Abnormal Security listed on the Official MCP Registry?: Yes — Abnormal Security is listed on the Official MCP Registry, alongside PulseMCP.
How many versions does Abnormal Security have?: MCP Toplist tracks 15 versions of Abnormal Security, most recently published on Oct 14, 2026.
Where can I find the source code for Abnormal Security?: The source code for Abnormal Security is hosted at github.com/wyre-technology/abnormal-mcp.

Used in projects

Do you run this server?

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers