Zed MCP Server Serena

Name: Zed MCP Server Serena
Author: delano

serena-agent · by delano

Zed editor extension for Serena MCP server - semantic code analysis toolkit

4 19 tools GitHub PyPI

No known CVEs

No license

Stale

Last commit 237d ago

Works with most clients

Transport: stdio, sse

19 tools · ~748 tok

Grade B · 0.4% of 200K ctx

MCPpedia last refreshed this data 4h ago

Edit this pageView history

Zed MCP Server Serena is an MCP server that zed editor extension for Serena MCP server - semantic code analysis toolkit. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 73/100 on MCPpedia's security, maintenance and efficiency rubric.

Developer Tools

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "zed-mcp-server-serena": {
      "args": [
        "serena-agent"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/zed-mcp-server-serena)](https://mcppedia.org/s/zed-mcp-server-serena)

Read me

What Zed Mcp Server Serena does

A Zed editor extension that integrates Serena - a powerful coding agent toolkit with semantic code analysis capabilities - via the Model Context Protocol (MCP).

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

73/100across 5 weighted dimensions

How we score →

0255075100

−27

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-49471high · fixedCVSS 8.3

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

### Summary Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port (TCP 24282, hardcoded as `0x5EDA` in `constants.py`). The server has no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach this API from any browser and write arbitrary content to the agent's persistent memory store — which the agent reads and acts on autonomously. Combined with `execute_shell_command` (enabled b

Affected: >= 0Fixed in 1.5.2source →

Inventory

Tools (19)

Click any tool to inspect its schema.

~748 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Zed Mcp Server Serena safe to use?: Zed Mcp Server Serena has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install Zed Mcp Server Serena?: Zed Mcp Server Serena supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Zed Mcp Server Serena do?: Zed Mcp Server Serena provides 19 tools: list_dir, find_file, search_for_pattern, get_symbols_overview, find_symbol and 14 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Zed Mcp Server Serena?: Zed Mcp Server Serena is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Zed Mcp Server Serena actively maintained?: Zed Mcp Server Serena is less actively maintained - last commit was 237 days ago. It has 4 GitHub stars.

Similar servers

Others in developer-tools

View all →

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.9k 4

Mcp Gitlab96

MCP server for using the GitLab API

2.0k 12

Socraticode MCP Server95

MCP server for enterprise local codebase indexing, semantic search, and code dependency graphs.

3.3k 4

Hex Graph MCP Server95

Token-efficient SSH MCP with hash-verified files and persistent tmux sessions. 14 tools.

566 3

MCP Security Weekly

Get CVE alerts and security updates for Zed Mcp Server Serena and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Frequently Asked Questions

Is Zed Mcp Server Serena safe to use?

Zed Mcp Server Serena has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.

How do I install Zed Mcp Server Serena?

Zed Mcp Server Serena supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Zed Mcp Server Serena do?

Zed Mcp Server Serena provides 19 tools: list_dir, find_file, search_for_pattern, get_symbols_overview, find_symbol and 14 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Zed Mcp Server Serena?

Zed Mcp Server Serena is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is Zed Mcp Server Serena actively maintained?

Zed Mcp Server Serena is less actively maintained - last commit was 237 days ago. It has 4 GitHub stars.