---
bezeichner: "io.github.GregDog/mcp-server-abnormal"
art: "mcp_server"
slug: "io-github-gregdog-mcp-server-abnormal"
paketkoordinate: "oci:ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
status: "aktiv"
homepage: "https://github.com/GregDog/mcp-server-abnormal"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.GregDog"
registerseite: "https://tracevero.com/mcp/io-github-gregdog-mcp-server-abnormal"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: true
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "sicherheit"
roh_beschreibung: "Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download."
version: "1.1.0"
roh_umgebungsvariablen: "ABNORMAL_API_TOKEN, ABNORMAL_BASE_URL, ABNORMAL_ALLOW_RESPONSE, ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD, ABNORMAL_MAX_EVIDENCE_BYTES"
roh_geheime_pflichtvariablen: "ABNORMAL_API_TOKEN"
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/GregDog/mcp-server-abnormal"
roh_paketquellen: "oci"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-17"
roh_aktualisiert_am: "2026-09-17"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "ghcr.io/gregdog/mcp-server-abnormal:v1.1.0"
roh_paketversionen: ""
roh_laufzeithinweise: ""
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: "ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=Enable evidence download MCP tools (EML and attachments) · ABNORMAL_ALLOW_RESPONSE=Enable response MCP tools (remediation) · ABNORMAL_API_TOKEN=Abnormal REST API bearer token · ABNORMAL_BASE_URL=Abnormal API base URL · ABNORMAL_MAX_EVIDENCE_BYTES=Max bytes per evidence download from Abnormal"
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/gregdog/mcp-server-abnormal:v1.1.0\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"ABNORMAL_API_TOKEN\",\"description\":\"Abnormal REST API bearer token\",\"required\":true,\"secret\":true},{\"name\":\"ABNORMAL_BASE_URL\",\"description\":\"Abnormal API base URL\",\"required\":false,\"secret\":false},{\"name\":\"ABNORMAL_ALLOW_RESPONSE\",\"description\":\"Enable response MCP tools (remediation)\",\"required\":false,\"secret\":false},{\"name\":\"ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD\",\"description\":\"Enable evidence download MCP tools (EML and attachments)\",\"required\":false,\"secret\":false},{\"name\":\"ABNORMAL_MAX_EVIDENCE_BYTES\",\"description\":\"Max bytes per evidence download from Abnormal\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}"
---

# Abnormal MCP Server

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | true | MCP-Register | 2026-09-11T01:17:02.031Z | abgeleitet | roh_geheime_pflichtvariablen: ABNORMAL_API_TOKEN; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-09-11T01:17:02.031Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-09-11T01:17:02.031Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-09-11T01:17:02.031Z | abgeleitet | roh_repository_url: https://github.com/GregDog/mcp-server-abnormal |
| Field of use, derived from the vendor description | sicherheit | MCP-Register | 2026-09-11T01:17:02.031Z | abgeleitet | roh_beschreibung: Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download. |
| Description (raw) | Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download. | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Declared version | 1.1.0 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Environment variables (raw) | ABNORMAL_API_TOKEN, ABNORMAL_BASE_URL, ABNORMAL_ALLOW_RESPONSE, ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD, ABNORMAL_MAX_EVIDENCE_BYTES | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Required secret variables (raw) | ABNORMAL_API_TOKEN | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Repository (raw) | https://github.com/GregDog/mcp-server-abnormal | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Package registries (raw) | oci | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-09-17 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-09-17 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Package identifiers (raw) | ghcr.io/gregdog/mcp-server-abnormal:v1.1.0 | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |
| Package versions (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Environment variable formats (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Environment variable descriptions (raw) | ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=Enable evidence download MCP tools (EML and attachments) · ABNORMAL_ALLOW_RESPONSE=Enable response MCP tools (remediation) · ABNORMAL_API_TOKEN=Abnormal REST API bearer token · ABNORMAL_BASE_URL=Abnormal API base URL · ABNORMAL_MAX_EVIDENCE_BYTES=Max bytes per evidence download from Abnormal | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/gregdog/mcp-server-abnormal:v1.1.0","transport":"stdio","environment":[{"name":"ABNORMAL_API_TOKEN","description":"Abnormal REST API bearer token","required":true,"secret":true},{"name":"ABNORMAL_BASE_URL","description":"Abnormal API base URL","required":false,"secret":false},{"name":"ABNORMAL_ALLOW_RESPONSE","description":"Enable response MCP tools (remediation)","required":false,"secret":false},{"name":"ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD","description":"Enable evidence download MCP tools (EML and attachments)","required":false,"secret":false},{"name":"ABNORMAL_MAX_EVIDENCE_BYTES","description":"Max bytes per evidence download from Abnormal","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-09-18T01:17:01.510Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-gregdog|io.github.GregDog]]

---

- Registry page: <https://tracevero.com/mcp/io-github-gregdog-mcp-server-abnormal>
- Retrieved on: 2026-10-11