Abnormal MCP Server

io.github.GregDog由 GitHub 账号 GregDog 发布v1.1.0更新于 Oct 24, 2026

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

已验证STDIO仅桌面沟通与协作安全与监控

概览

AI 生成的概览

让助手查询 Abnormal Security 的威胁、邮件、员工、ATO 案件和供应商数据，并可选启用处置与证据下载工具。

可以做什么
这是一个面向 Abnormal Security 的 MCP 服务器，默认提供 27 个只读工具，覆盖威胁日志、邮件搜索、邮箱活动、员工身份与登录记录、ATO 案件、供应商入侵案件、Detection 360 报告、URL 重写点击和审计日志。可选启用的工具集增加处置操作（搜索处置、威胁修复/取消修复、案件状态更新、提交 Detection 360 报告）以及证据下载（邮件 EML 与附件）。默认以本地进程通过 stdio 运行，也可选择启用 Streamable HTTP。
适用场景
当助手需要基于 Abnormal Security 调查邮件威胁、商业邮件诈骗、账号接管案件或供应商风险，且只读访问已足够时使用。只有在确实需要处置或获取邮件与附件时，才启用相应的开关。
运行要求
需要本地运行环境（原生 Go 二进制或 Docker 镜像 ghcr.io/gregdog/mcp-server-abnormal）。必须提供 ABNORMAL_API_TOKEN；ABNORMAL_BASE_URL 用于选择美国、欧盟或 FedRAMP 端点。可选开关：ABNORMAL_ALLOW_RESPONSE、ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD、ABNORMAL_MAX_EVIDENCE_BYTES。需要能访问 Abnormal REST API 的网络。
安装前请注意
该服务器没有内置身份验证或权限控制，仅限本地使用；不要在没有自有访问控制的情况下把它的 HTTP 端点暴露到网络上。ABNORMAL_API_TOKEN 是访问 Abnormal 租户的持有者凭证。处置工具可以删除或移动邮件、修复威胁、更改案件状态并提交报告，证据下载会获取邮件内容和附件；两者默认关闭，并需通过确认预览。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Abnormal MCP Server，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Abnormal MCP Server

[CI] [Go] [License]

A secure, open-source Model Context Protocol server for Abnormal Security.

This project is not an official Abnormal product and is not endorsed by Abnormal AI.

Overview

abnormal-mcp lets MCP clients such as Cursor and Claude Desktop query Abnormal Security over stdio (default) or Streamable HTTP. It uses a lightweight handwritten client against the Abnormal Security Client API.

text
MCP Client    → Abnormal MCP Server (stdio or HTTP)        → Abnormal REST API

The server is read-only by default. Response and evidence download tools are opt-in and independent. Abnormal authorization still applies to every request.

Features

Read (always on)

  • Threat list and get from the Threat Log
  • Threat links and attachment metadata
  • Threat action status poll (abnormal_threat_action_get)
  • Message search with ergonomic filters (since, sender, sender_domain, recipient, subject, url, attachment, sender_ip, judgement)
  • Search activity list and status
  • Message remediation history
  • AI Security Mailbox (formerly Abuse Mailbox) campaigns and unanalyzed reports
  • Employee profile, identity (Genome), and recent logins
  • ATO case list, detail, and analysis
  • Vendor list, detail, activity, and vendor compromise cases
  • Detection 360 report list (false positives and missed attacks)
  • US, EU, and FedRAMP base URLs (configurable)

Response (opt-in: ABNORMAL_ALLOW_RESPONSE=true)

  • Search remediation (delete, move_to_inbox) with confirm: true preview gate
  • Threat remediate / unremediate with confirm: true preview gate
  • ATO case status update with confirm: true preview gate
  • Detection 360 report submit (false positive, missed attack/spam/graymail) with confirm: true preview gate

Evidence download (opt-in: ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=true)

  • Message EML download (by ABX message ID or search cloud_message_id)

  • Attachment analysis signals and attachment download

  • Metadata + bounded preview by default; optional base64 embed (max 1 MiB in tool output)

  • stdio transport (default) and opt-in Streamable HTTP

  • Native Go binary and Docker image

  • MCP Registry listing on tagged releases (io.github.GregDog/mcp-server-abnormal)

Quick Start

Create an Abnormal REST API token in the Abnormal portal under Integrations → Abnormal REST API.

bash
export ABNORMAL_API_TOKEN="your-token"abnormal-mcp serve

Installation

From source

bash
git clone https://github.com/GregDog/mcp-server-abnormal.gitcd mcp-server-abnormalmake build

Docker

bash
docker run --rm -i \  -e ABNORMAL_API_TOKEN \  ghcr.io/gregdog/mcp-server-abnormal serve

Client configuration

Cursor (stdio)

See examples/cursor.mcp.json.

Claude Desktop

See examples/claude-desktop.json.

Tools

27 read tools are always registered. With ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=true, five evidence tools are added (32 total). With ABNORMAL_ALLOW_RESPONSE=true, four response tools are added (31 total, or 36 with both gates enabled).

AreaTools
Threatsabnormal_threats_list, abnormal_threat_get, abnormal_threat_action_get, abnormal_threat_links_list, abnormal_threat_attachments_list
Searchabnormal_search_messages, abnormal_search_activities_list, abnormal_search_activity_get
Messagesabnormal_message_remediation_history
Mailboxabnormal_mailbox_campaigns_list, abnormal_mailbox_campaign_get, abnormal_mailbox_unanalyzed_list
Employeesabnormal_employee_get, abnormal_employee_identity_get, abnormal_employee_logins_list
ATO casesabnormal_cases_list, abnormal_case_get, abnormal_case_analysis_get, abnormal_case_action_get
Vendorsabnormal_vendors_list, abnormal_vendor_get, abnormal_vendor_activity_list, abnormal_vendor_cases_list, abnormal_vendor_case_get
Detection 360abnormal_detection360_reports_list
URL rewriteabnormal_url_rewrite_clicks_list
Audit logsabnormal_audit_logs_list
Evidence (opt-in)abnormal_message_eml_get, abnormal_search_message_eml_get, abnormal_message_attachment_get, abnormal_message_attachment_download, abnormal_search_attachment_download
Response (opt-in)abnormal_search_remediate, abnormal_threat_remediate, abnormal_case_update, abnormal_detection360_report_submit

See docs/tools.md for parameters.

Configuration

VariableDefaultPurpose
ABNORMAL_API_TOKEN(required)Bearer token
ABNORMAL_BASE_URLhttps://api.abnormalplatform.com/v1API base URL
ABNORMAL_ALLOW_RESPONSEfalseEnable response tools (Phase 2+)
ABNORMAL_ALLOW_EVIDENCE_DOWNLOADfalseEnable evidence download (Phase 5+)
ABNORMAL_MCP_TRANSPORTstdiostdio or http

Full list: docs/configuration.md.

Security

Read tools are always on. Response and evidence tools require explicit opt-in.

Local use only: this server has no built-in authentication or RBAC. Use stdio (default) or loopback HTTP on the same machine. Do not expose the HTTP endpoint on a network without your own access controls.

See docs/security.md and SECURITY.md.

Development

bash
make checkmake test-access    # optional live API smoke testmake test-phase34   # Phase 3/4 live smoke testmake test-phase5    # Phase 5 evidence smoke test (requires ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD)

See docs/development.md.

License

Apache-2.0. See LICENSE.

来源：README.md，提交 4f7bfce

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

2
  1. v1.1.0最新Sep 17, 2026
  2. v1.0.1Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分