Abnormal Security MCP

The full Abnormal Security REST API in your terminal and your agents - with a local threat store, ranked SOC triage, blocking remediation, and one-shot client reporting.

People who work with Abnormal and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

One of 67 MCP servers published from servosity/msp-skills. Stars and repository activity are shared across all of them. See all 67 →

VERIFIED ACTIVE

LAST COMMIT 2026-09-28 · VERIFIED 2026-09-30

NOASSERTION · Go servers · how we verify → /methodology

01 · Install Abnormal Security MCP

before you install - you'll need

Set ABNORMAL_API_TOKEN before connecting.

Claude Desktop

Settings → Extensions → Install, then select the https://github.com/Servosity/msp-skills/releases/download/abnormal-v0.1.3/abnormal-mcp.mcpb .mcpb bundle

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as Claude Desktop extension (.mcpb bundle)

license no standard license detected - usage rights unclear; check the repo before commercial use

registry namespace io.github.Servosity is GitHub-verified and matches the repo owner

03 · What Abnormal Security MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

zammad-v0.1.6 · 2026-09-28

Reprinted on cli-printing-press 4.32.5 (from 4.28.0). Every command, flag and · MCP tool that shipped in 0.1.5 is still here; the list below is what changed for · an operator or an agent. · Changed · Engine 4.32.5.…

sentinelone-v0.2.1 · 2026-09-28

0.2.0 was tagged but never published: the release probe refused its MCP binary, which reported serverInfo.version 0.0.0-dev because the reprint dropped var version from the MCP entry point. That is restored (and…

huntress-v0.1.6 · 2026-09-28

Reprinted on cli-printing-press 4.32.5 (from 4.24.0). Every command, flag and · MCP tool that shipped in 0.1.5 is still here except the two named below; the list is · what changed for an operator or an agent. · Upgrade…

04 · Who maintains Abnormal Security MCP

Abnormal Security MCP is maintained by servosity. We track 67 MCP servers from servosity - 67 actively maintained, 46 combined GitHub stars, oldest repo from May 2026. Full record: all servers from servosity.

  1. Acronis MCP The first real CLI for the Acronis Cyber Protect Cloud platform - every tenant, agent, and usage ★ 46
  2. Action1 MCP Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations. ★ 46
  3. Afi MCP The first CLI for Afi SaaS backup - full public-API coverage plus the fleet-wide coverage ★ 46
  4. AppDirect MCP AppDirect marketplace operations with an offline mirror and cross-company billing reconciliation. ★ 46
  5. Atera MCP Every Atera RMM + PSA endpoint, plus a local SQLite mirror that answers fleet-health, SLA, and ★ 46
  6. Autotask MCP Every Autotask entity at the command line, plus a local SQLite mirror that answers ticket-aging ★ 46

05 · Facts

repository
github.com/servosity/msp-skills
category
email - actively maintained as of 2026-09-30.
registry
io.github.Servosity/abnormal-mcp (active, first published 2026-06-07 · 4 versions)
packages
mcpb:https://github.com/Servosity/msp-skills/releases/download/abnormal-v0.1.3/abnormal-mcp.mcpb

06 · Abnormal Security MCP FAQ

What is Abnormal Security MCP?

The full Abnormal Security REST API in your terminal and your agents - with a local threat store, ranked SOC triage, blocking remediation, and one-shot client reporting.

Is Abnormal Security MCP still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-28. We re-verify nightly.

07 · Alternatives to Abnormal Security MCP

Alternatives to Abnormal Security MCP

Maintained email servers if Abnormal Security MCP isn't the fit.

  1. Emailmd Render markdown into email-safe HTML, lint drafts for deliverability problems, and preview emails. ★ 1,380 · 2026-08-26
  2. Sessy - Amazon SES observability Read-only Amazon SES observability: search events, inspect bounces, pull delivery stats. ★ 937 · 2026-09-29
  3. Hqbase Connect AI agents to your self-hosted HQBase shared email workspace. ★ 332 · 2026-09-12
  4. SendGrid MCP server for SendGrid - global transactional + marketing email (Twilio-owned) ★ 271 · 2026-09-27
  5. Atomic Mail Programmable email inbox for AI agents - JMAP, PoW auth, stdio MCP server. ★ 264 · 2026-09-27
  6. Clippy Copy AI-generated content to the macOS clipboard: rich Gmail-ready email drafts, text, and files ★ 248 · 2026-09-04

More email MCP servers · Proton Mail (unofficial) · XCRS Mobile & TV Automation · SMTPing Email Verification · Inbox To Action · CV Forge

More Go MCP servers · Acronis MCP · Action1 MCP · Afi MCP · AppDirect MCP · Atera MCP · see all