Abnormal MCP Server

io.github.GregDog由 GitHub 帳號 GregDog 發布v1.1.0更新於 Oct 24, 2026

Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.

已驗證STDIO僅桌面溝通與協作安全與監控

概覽

AI 產生的概覽

讓助理查詢 Abnormal Security 的威脅、郵件、員工、ATO 案件與供應商資料，並可選擇啟用處置與證據下載工具。

可以做什麼
這是一個針對 Abnormal Security 的 MCP 伺服器，預設提供 27 個唯讀工具，涵蓋威脅日誌、郵件搜尋、信箱活動、員工身分與登入紀錄、ATO 案件、供應商入侵案件、Detection 360 報告、URL 重寫點擊與稽核日誌。可選擇啟用的工具集會加入處置動作（搜尋處置、威脅修復／取消修復、案件狀態更新、提交 Detection 360 報告）以及證據下載（郵件 EML 與附件）。預設以本機程序透過 stdio 執行，也可選擇啟用 Streamable HTTP。
適用情境
當助理需要根據 Abnormal Security 調查郵件威脅、商業郵件詐騙、帳號接管案件或供應商風險，且唯讀存取已足夠時使用。只有在確實需要處置或取得郵件與附件時，才啟用對應開關。
執行需求
需要本機執行環境（原生 Go 二進位檔或 Docker 映像 ghcr.io/gregdog/mcp-server-abnormal）。必須提供 ABNORMAL_API_TOKEN；ABNORMAL_BASE_URL 用來選擇美國、歐盟或 FedRAMP 端點。選用開關：ABNORMAL_ALLOW_RESPONSE、ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD、ABNORMAL_MAX_EVIDENCE_BYTES。需要能連線至 Abnormal REST API 的網路。
安裝前請注意
此伺服器沒有內建身分驗證或權限控制，僅限本機使用；不要在沒有自有存取控制的情況下把它的 HTTP 端點暴露到網路上。ABNORMAL_API_TOKEN 是存取 Abnormal 租戶的持有者憑證。處置工具可以刪除或移動郵件、修復威脅、變更案件狀態並提交報告，證據下載會取得郵件內容與附件；兩者預設關閉，並需通過確認預覽。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Abnormal MCP Server，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Abnormal MCP Server

[CI] [Go] [License]

A secure, open-source Model Context Protocol server for Abnormal Security.

This project is not an official Abnormal product and is not endorsed by Abnormal AI.

Overview

abnormal-mcp lets MCP clients such as Cursor and Claude Desktop query Abnormal Security over stdio (default) or Streamable HTTP. It uses a lightweight handwritten client against the Abnormal Security Client API.

text
MCP Client    → Abnormal MCP Server (stdio or HTTP)        → Abnormal REST API

The server is read-only by default. Response and evidence download tools are opt-in and independent. Abnormal authorization still applies to every request.

Features

Read (always on)

  • Threat list and get from the Threat Log
  • Threat links and attachment metadata
  • Threat action status poll (abnormal_threat_action_get)
  • Message search with ergonomic filters (since, sender, sender_domain, recipient, subject, url, attachment, sender_ip, judgement)
  • Search activity list and status
  • Message remediation history
  • AI Security Mailbox (formerly Abuse Mailbox) campaigns and unanalyzed reports
  • Employee profile, identity (Genome), and recent logins
  • ATO case list, detail, and analysis
  • Vendor list, detail, activity, and vendor compromise cases
  • Detection 360 report list (false positives and missed attacks)
  • US, EU, and FedRAMP base URLs (configurable)

Response (opt-in: ABNORMAL_ALLOW_RESPONSE=true)

  • Search remediation (delete, move_to_inbox) with confirm: true preview gate
  • Threat remediate / unremediate with confirm: true preview gate
  • ATO case status update with confirm: true preview gate
  • Detection 360 report submit (false positive, missed attack/spam/graymail) with confirm: true preview gate

Evidence download (opt-in: ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=true)

  • Message EML download (by ABX message ID or search cloud_message_id)

  • Attachment analysis signals and attachment download

  • Metadata + bounded preview by default; optional base64 embed (max 1 MiB in tool output)

  • stdio transport (default) and opt-in Streamable HTTP

  • Native Go binary and Docker image

  • MCP Registry listing on tagged releases (io.github.GregDog/mcp-server-abnormal)

Quick Start

Create an Abnormal REST API token in the Abnormal portal under Integrations → Abnormal REST API.

bash
export ABNORMAL_API_TOKEN="your-token"abnormal-mcp serve

Installation

From source

bash
git clone https://github.com/GregDog/mcp-server-abnormal.gitcd mcp-server-abnormalmake build

Docker

bash
docker run --rm -i \  -e ABNORMAL_API_TOKEN \  ghcr.io/gregdog/mcp-server-abnormal serve

Client configuration

Cursor (stdio)

See examples/cursor.mcp.json.

Claude Desktop

See examples/claude-desktop.json.

Tools

27 read tools are always registered. With ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD=true, five evidence tools are added (32 total). With ABNORMAL_ALLOW_RESPONSE=true, four response tools are added (31 total, or 36 with both gates enabled).

AreaTools
Threatsabnormal_threats_list, abnormal_threat_get, abnormal_threat_action_get, abnormal_threat_links_list, abnormal_threat_attachments_list
Searchabnormal_search_messages, abnormal_search_activities_list, abnormal_search_activity_get
Messagesabnormal_message_remediation_history
Mailboxabnormal_mailbox_campaigns_list, abnormal_mailbox_campaign_get, abnormal_mailbox_unanalyzed_list
Employeesabnormal_employee_get, abnormal_employee_identity_get, abnormal_employee_logins_list
ATO casesabnormal_cases_list, abnormal_case_get, abnormal_case_analysis_get, abnormal_case_action_get
Vendorsabnormal_vendors_list, abnormal_vendor_get, abnormal_vendor_activity_list, abnormal_vendor_cases_list, abnormal_vendor_case_get
Detection 360abnormal_detection360_reports_list
URL rewriteabnormal_url_rewrite_clicks_list
Audit logsabnormal_audit_logs_list
Evidence (opt-in)abnormal_message_eml_get, abnormal_search_message_eml_get, abnormal_message_attachment_get, abnormal_message_attachment_download, abnormal_search_attachment_download
Response (opt-in)abnormal_search_remediate, abnormal_threat_remediate, abnormal_case_update, abnormal_detection360_report_submit

See docs/tools.md for parameters.

Configuration

VariableDefaultPurpose
ABNORMAL_API_TOKEN(required)Bearer token
ABNORMAL_BASE_URLhttps://api.abnormalplatform.com/v1API base URL
ABNORMAL_ALLOW_RESPONSEfalseEnable response tools (Phase 2+)
ABNORMAL_ALLOW_EVIDENCE_DOWNLOADfalseEnable evidence download (Phase 5+)
ABNORMAL_MCP_TRANSPORTstdiostdio or http

Full list: docs/configuration.md.

Security

Read tools are always on. Response and evidence tools require explicit opt-in.

Local use only: this server has no built-in authentication or RBAC. Use stdio (default) or loopback HTTP on the same machine. Do not expose the HTTP endpoint on a network without your own access controls.

See docs/security.md and SECURITY.md.

Development

bash
make checkmake test-access    # optional live API smoke testmake test-phase34   # Phase 3/4 live smoke testmake test-phase5    # Phase 5 evidence smoke test (requires ABNORMAL_ALLOW_EVIDENCE_DOWNLOAD)

See docs/development.md.

License

Apache-2.0. See LICENSE.

來源：README.md，提交 4f7bfce

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

2
  1. v1.1.0最新Sep 17, 2026
  2. v1.0.1Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分