abnormal-security-api-patternslisted

# Abnormal Security REST API Patterns ## Overview The Abnormal Security REST API provides programmatic access to threat detection, abuse mailbox cases, account takeover protection, vendor risk assessment, and message analysis. This skill covers authentication, request patterns, pagination, filtering, rate limiting, error handling, and performance optimization. ## Authentication ### Bearer Token Authentication Abnormal Security uses a static Bearer token for API authentication: ```http GET https://api.abnormalplatform.com/v1/threats Authorization: Bearer YOUR_API_TOKEN Accept: application/json ``` ### Token Management | Field | Description | |-------|-------------| | Type | Static API token (no expiry rotation required) | | Format | Long alphanumeric string | | Header | `Authorization: Bearer <token>` | | Scope | Full API access (determined at token creation) | ### Environment Variables ```bash export ABNORMAL_API_TOKEN="your-api-token" export ABNORMAL_MCP_URL="https://mcp.wyre.ai/v1/abnormal-security/mcp" ``` ### MCP Gateway Headers When used through the MCP Gateway, credentials are passed via the `Authorization` header: ```json { "headers": { "Authorization": "Bearer ${ABNORMAL_API_TOKEN}" } } ``` The gateway forwards this header to the Abnormal Security MCP server, which uses it to authenticate with the Abnormal API. ## Base URL | Environment | Base URL | |-------------|----------| | **Production** | `https://api.abnormalplatform.com` | ### API Path