LocalFree server, account needed

Abnormal MCP server

GregDog/mcp-server-abnormal

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

0 GitHub stars

Install Abnormal in Claude Code

Claude Code
claude mcp add abnormal -e ABNORMAL_API_TOKEN=... -- docker run -i --rm -e ABNORMAL_API_TOKEN ghcr.io/gregdog/mcp-server-abnormal:v1.1.0
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "abnormal": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ABNORMAL_API_TOKEN",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "..."
      }
    }
  }
}

Replace each ... with your own value.

Frequently asked questions

What does the Abnormal MCP server do?

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

Is the Abnormal MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Abnormal run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Abnormal to Claude Code?

Run: claude mcp add abnormal -e ABNORMAL_API_TOKEN=... -- docker run -i --rm -e ABNORMAL_API_TOKEN ghcr.io/gregdog/mcp-server-abnormal:v1.1.0

More search & web scraping MCP servers

View all