io.github.GregDog/mcp-server-abnormal
Abnormal MCP Server
Is the Abnormal MCP server down? No. It answered initialize and tools/list in the probe of 2026-11-04.
Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.
alive probed 2026-11-14 · unchanged since 2026-11-04
- Run it
- docker run -i --rm ghcr.io/gregdog/mcp-server-abnormal:v1.1.0 (stdio, probed in a container with the network off)
- Host
- ghcr.io
- Reports itself as
- abnormal-mcp 1.1.0
- Capabilities
- logging, tools
- Instructions
- none
- Of a 1M window
- 0.6 % of a 1M context window
- Count
- 5.5k tokens in Claude Opus 5.5, exact, measured 2026-11-04. With the Claude Code prefix mcp__…__ on each tool name: 6.0k. The o200k_base estimate is 3.0k. Counted again when the tool definitions change. Method.
- Repository
- https://github.com/GregDog/mcp-server-abnormal
- Website
- https://github.com/GregDog/mcp-server-abnormal
- Registry
- active, updated 2026-09-17 · registry entry
Most expensive tools
The Claude column scales the o200k estimate of each tool by this server's ratio of exact to estimate, 1.88×.
| Tool | ≈ Claude tokens | o200k estimate | Share of this server |
|---|---|---|---|
| abnormal_search_messages | 581 | 310 | 10 % |
| abnormal_mailbox_campaigns_list | 465 | 248 | 8 % |
| abnormal_threats_list | 424 | 226 | 8 % |
| abnormal_audit_logs_list | 394 | 210 | 7 % |
| abnormal_url_rewrite_clicks_list | 319 | 170 | 6 % |
Compare this server with others.
More servers
Other registry entries on ghcr.io, the ones next to this name; all of them.
- ComfyUI MCP io.github.GermaniU/comfyui-mcp · alive
- MCP Memory io.github.GermaniU/mcp-memory · alive
- MinerU MCP io.github.GermaniU/mineru-mcp · alive
- io.github.GoPlasmatic/orion · alive
- Openlane MCP Server io.github.GregDog/mcp-server-theopenlane · alive
- codeagent-memory io.github.HanochZhu/codeagent-memory · alive
- ChartBytes io.github.Haswell119/chartbytes-mcp · alive
- Agent Workspace MCP io.github.HrRodan/agent-workspace-mcp · alive
Servers that mention abnormal.
- uk.co.abnormalloadquotes/site · alive
- Abnormal Security MCP io.github.Servosity/abnormal-mcp · needs env
- Abnormal Security io.github.WYRE-AI/abnormal-mcp · alive
- Abnormal Security io.github.wyre-technology/abnormal-mcp · alive
Badge for the README
The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.
A mail when this server changes
Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.
For the publisher
- The server answers initialize and tools/list. Nothing to fix.