Skip to content
Grok

Abnormal Security for Grok

io.github.wyre-technology/abnormal-mcp

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

client:Grok transport:stdio runtime:oci

Install Abnormal Security in Grok

.mcp.json (in your project root)

Held in this page only — never stored, logged, or sent anywhere but back to your screen.

{
  "mcpServers": {
    "abnormal-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/abnormal-mcp:v1.2.5"
      ],
      "env": {
        "ABNORMAL_API_TOKEN": "<ABNORMAL_API_TOKEN>",
        "MCP_TRANSPORT": "<MCP_TRANSPORT>",
        "AUTH_MODE": "<AUTH_MODE>",
        "LOG_LEVEL": "<LOG_LEVEL>"
      }
    }
  }
}

Grok Build reads Claude Code's .mcp.json and Claude Desktop's config unchanged, so a server you have already set up there needs nothing new. The Grok web app and X integration do not take custom servers. Grok docs

Abnormal Security in other clients