Is Serena MCP: the IDE for your agent MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highShell command built from a string (injection risk)
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan187 source files scanned3/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (3)
- highShell command built from a string (injection risk)
exec.shell-concatserena_agent-1.5.3/repo_dir_sync.py: …in {os.path.abspath(os.getcwd())}") os.system(f"git commit --file={commitMsgFilename}") … - mediumeval / new Function used
exec.evalserena_agent-1.5.3/src/serena/resources/config/prompt_templates/info_prompts.yml: …luation & modification: session.eval("expr") # evaluate in current fram… - mediumsubprocess with shell=True
exec.shell-trueserena_agent-1.5.3/src/serena/util/shell.py: …process.Popen( command, shell=True, stdin=subprocess.DEVNULL, …
Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Serena MCP: the IDE for your agent does
- Figma ContextGive your coding agent access to your Figma data. Implement designs in any framework in one-shot.not reviewedWidely usedB
Power BI Authoring MCP Server (Local)The Power BI Authoring MCP server lets an AI agent create and change Power BI semantic models.not reviewedEstablishedA- ContextStream MCP ServerProject memory, semantic code search, and grounded agent context.not reviewedEstablishedA
Serena MCP: the IDE for your agent reviews, tools and install