cosmic-mcp

All servers

Abnormal MCP Server

io.github.GregDog/mcp-server-abnormal · version 1.1.0

Community listing. Not installed or verified by cosmic-mcp. Read the source and its permissions before you run it.

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

https://github.com/GregDog/mcp-server-abnormal

Quick facts

  • Listing: Community
  • Published Sep 17, 14:04 UTC
  • Transport: stdio
  • Package: oci ghcr.io/gregdog/mcp-server-abnormal:v1.1.0
  • Listed by cosmic-mcp: Nov 9, 04:25 UTC

Web search Security

Setup snippets

Generated from the registry entry. cosmic-mcp has not run or reviewed this server; values in angle brackets are yours to fill in.

Run it locally (oci)

docker run -i --rm -e 'ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD' -e 'ABNORMAL_ALLOW_RESPONSE' -e 'ABNORMAL_API_TOKEN' -e 'ABNORMAL_BASE_URL' -e 'ABNORMAL_MAX_EVIDENCE_BYTES' 'ghcr.io/gregdog/mcp-server-abnormal:v1.1.0'

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD",
        "-e",
        "ABNORMAL_ALLOW_RESPONSE",
        "-e",
        "ABNORMAL_API_TOKEN",
        "-e",
        "ABNORMAL_BASE_URL",
        "-e",
        "ABNORMAL_MAX_EVIDENCE_BYTES",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
      ],
      "command": "docker",
      "env": {
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your abnormal allow evidence download>",
        "ABNORMAL_ALLOW_RESPONSE": "<your abnormal allow response>",
        "ABNORMAL_API_TOKEN": "<your abnormal api token>",
        "ABNORMAL_BASE_URL": "<your abnormal base url>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your abnormal max evidence bytes>"
      }
    }
  }
}

Claude Code

claude mcp add 'mcp-server-abnormal' -- docker run -i --rm -e 'ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD' -e 'ABNORMAL_ALLOW_RESPONSE' -e 'ABNORMAL_API_TOKEN' -e 'ABNORMAL_BASE_URL' -e 'ABNORMAL_MAX_EVIDENCE_BYTES' 'ghcr.io/gregdog/mcp-server-abnormal:v1.1.0'

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "mcp-server-abnormal": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD",
        "-e",
        "ABNORMAL_ALLOW_RESPONSE",
        "-e",
        "ABNORMAL_API_TOKEN",
        "-e",
        "ABNORMAL_BASE_URL",
        "-e",
        "ABNORMAL_MAX_EVIDENCE_BYTES",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
      ],
      "command": "docker",
      "env": {
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your abnormal allow evidence download>",
        "ABNORMAL_ALLOW_RESPONSE": "<your abnormal allow response>",
        "ABNORMAL_API_TOKEN": "<your abnormal api token>",
        "ABNORMAL_BASE_URL": "<your abnormal base url>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your abnormal max evidence bytes>"
      }
    }
  }
}

VS Code (.vscode/mcp.json)

{
  "servers": {
    "mcp-server-abnormal": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD",
        "-e",
        "ABNORMAL_ALLOW_RESPONSE",
        "-e",
        "ABNORMAL_API_TOKEN",
        "-e",
        "ABNORMAL_BASE_URL",
        "-e",
        "ABNORMAL_MAX_EVIDENCE_BYTES",
        "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
      ],
      "command": "docker",
      "env": {
        "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<your abnormal allow evidence download>",
        "ABNORMAL_ALLOW_RESPONSE": "<your abnormal allow response>",
        "ABNORMAL_API_TOKEN": "<your abnormal api token>",
        "ABNORMAL_BASE_URL": "<your abnormal base url>",
        "ABNORMAL_MAX_EVIDENCE_BYTES": "<your abnormal max evidence bytes>"
      },
      "type": "stdio"
    }
  }
}

Related servers

  • AgentTrust — Identity & Trust for A2A Agents Verified domain
    Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
  • AgentMash Verified domain
    All your bookmarks in one library. Share them with your AI agents. Read-only search over your saves.
  • Agentic Terminal Directory Verified domain
    Verified merchants accepting agentic payments on Lightning/L402/BOLT12/USDT — search, verify, pay.
  • Ankra Docs Verified domain
    Search the Ankra documentation: clusters, stacks, GitOps, CI/CD and the CLI. No account needed.
  • Auralogs Verified domain
    Read-only access to Auralogs production logs: search logs, inspect errors, review AI analyses.
  • AutoRFP.ai Verified domain
    Search AutoRFP.ai projects, requirements, content library, and tags for Q&A and analytics.