{"name":"io.github.oraios/serena","slug":"oraios-serena","title":"Serena MCP: the IDE for your agent","description":"A powerful toolkit for coding, providing semantic retrieval and editing capabilities.","url":"https://mcp.market/server/oraios-serena","rating":null,"grade":"C","score":60,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":81,"stars":29840,"forks":2033,"downloads_week":34040,"last_push_at":"2026-09-24T08:57:40.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/oraios/serena","website":null,"version":"1.5.3","remotes":[],"packages":[{"registryType":"pypi","identifier":"serena-agent","version":"1.5.3","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"description":"Select the python version","value":"3.13","type":"named","name":"-p"},{"value":"start-mcp-server","type":"positional"},{"value":"--project-from-cwd","type":"positional"},{"description":"The name of a markdown file representing Serena's execution context, typically related to the executing client.  Allowed values are: agent, antigravity, chatgpt, claude-code, codex, context.template, copilot-cli, desktop-app, ide, jb-ai-assistant, jb-copilot-plugin, junie, oaicompat-agent, vscode ","default":"desktop-app","type":"named","name":"--context"}]}],"tools":[],"scan":{"score":60,"grade":"C","scanned_at":"2026-09-27T17:06:25.210Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T17:06:25.136Z","components":{"code":{"score":3,"max":25,"notes":["187 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 3 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"serena_agent-1.5.3/repo_dir_sync.py: …in {os.path.abspath(os.getcwd())}\") os.system(f\"git commit --file={commitMsgFilename}\") …"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"serena_agent-1.5.3/src/serena/resources/config/prompt_templates/info_prompts.yml: …luation & modification: session.eval(\"expr\") # evaluate in current fram…"},{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"serena_agent-1.5.3/src/serena/util/shell.py: …process.Popen( command, shell=True, stdin=subprocess.DEVNULL, …"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"serena-agent","version":"1.5.3","found":true,"weeklyDownloads":34040,"license":"MIT","dependencyCount":57,"publishedAt":"2026-05-26T19:06:30.079559Z","repositoryUrl":"https://github.com/oraios/serena"}],"repo":{"found":true,"owner":"oraios","repo":"serena","archived":false,"pushedAt":"2026-09-24T08:57:40Z","stars":29840,"forks":2033,"openIssues":182,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/181485370?v=4","ownerCreatedAt":"2024-09-13T13:29:14Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/181485370?v=4&s=128","source":"github"},"presence":{"stars":29840,"forks":2033,"downloadsWeek":34040,"license":"NOASSERTION","lastPushAt":"2026-09-24T08:57:40.000Z","score":81}}}},"grade_history":[],"reviews":[]}