Abnormal MCP Server for Claude Desktop
io.github.gregdog/mcp-server-abnormal
Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.
client:Claude Desktop
transport:stdio
runtime:oci
Install Abnormal MCP Server in Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json · windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"mcp-server-abnormal": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
],
"env": {
"ABNORMAL_API_TOKEN": "<ABNORMAL_API_TOKEN>",
"ABNORMAL_BASE_URL": "<ABNORMAL_BASE_URL>",
"ABNORMAL_ALLOW_RESPONSE": "<ABNORMAL_ALLOW_RESPONSE>",
"ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD": "<ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD>",
"ABNORMAL_MAX_EVIDENCE_BYTES": "<ABNORMAL_MAX_EVIDENCE_BYTES>"
}
}
}
}
Settings → Developer → Edit Config opens this file. Restart the app after saving. Claude Desktop docs