Abnormal Security

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/wyre-ai-abnormal-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

6 read · 4 write · 0 delete

Secrets

1 (API keys, tokens or passwords)

Install scripts

Not scanned yet

Runs as

Docker image

Tools (10)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• abnormal_abuse_list

  List phishing emails reported by users via the Abuse Mailbox. Returns user-submitted reports with analysis results indicating whether Abnormal confirmed the threat.

• abnormal_cases_get

  Get detailed information about a specific security case by ID. Returns case status, analyst notes, associated threats, and timeline.

• abnormal_cases_list

  List all active security investigation cases in Abnormal Security. Cases group related threats for analyst review and workflow management.

• abnormal_messages_get

  Get detailed analysis of a specific message within a threat case. Returns full message metadata, headers, URLs, attachments, and AI-based threat analysis.

• abnormal_messages_list

  List messages contained within a specific threat case. Returns message IDs and summary data for all emails associated with the threat.

• abnormal_navigate

  Discover available Abnormal Security tools by domain. Returns tool names and descriptions for the selected domain. All tools are callable at any time — this is a help/discovery aid, not a prerequisite.

• abnormal_remediation_manage

  Trigger or check the status of a remediation action for a specific threat message. Supports requesting remediation (removal from mailboxes) or checking current remediation status.

• abnormal_status

  Show connection status and available domains

• abnormal_threats_get

  Get detailed information about a specific threat case by ID. Returns threat details including classification, severity, and related message IDs.

• abnormal_threats_list

  List detected threats and cases from Abnormal Security. Returns a paginated list of threat IDs with summary information.

Signals

Stars

0

Forks

1

Open issues

0

Last commit

Oct 14, 2026 (15 days ago)

Last release

Oct 14, 2026 (15 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.WYRE-AI/abnormal-mcp

Version

1.2.7

Auth

API key

Packages

oci ghcr.io/wyre-ai/abnormal-mcp:v1.2.7

License

Apache-2.0

Repository

github.com/WYRE-AI/abnormal-mcp

Website

github.com/WYRE-AI/abnormal-mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql