Getting Started with Serena MCP (Safely)

Serena is an open-source MCP coding agent. Repo: github.com/oraios/serena.

Safety first (August 2026): SSTI RCE on project activation (GHSA-pp25-4cg4-qcr9) and earlier dashboard/DNS-rebinding (CVE-2026-49471). Install serena-agent 1.7.0 or newer. Advisory: Critical RCE in Serena. This post does not describe exploit steps.

Who this is for

MCP users on a throwaway repo you created.

Overview: Top 10 AI agent tools for after-work Python.

Steps to start tonight

1. Confirm a safe version

serena-agent ≥ 1.7.0. Upgrade old builds.

2. Throwaway project only

Do not open untrusted .serena/ folders.

3. Bind MCP only to your machine

Local stdio. Do not expose a dashboard.

4. One read, then one small edit

Review the patch yourself.

5. Disconnect when you stop

Tiny exercise (20–30 minutes)

Function plus unittest on the throwaway file. Run tests yourself.

Pitfalls

Pre-1.7.0; activating someone else’s project; public dashboard; confusing Serena with Amp.

Next step

Intro to Python Programming.