What it is
A language-server-backed toolkit that gives an agent IDE-grade moves: find a symbol, trace its references, and edit it in place, rather than reading and rewriting whole files. On a large codebase that precision is the point, in both correctness and token cost.
How it was vetted
Booted from source at commit 6018bf4 (2026-07-10) and read the parts that matter
for trust: anything that edits, persists, or phones home.
- It edits, and it persists. Serena’s tool set includes
EditMemoryTool,WriteMemoryTool, and the code editor; several are markedToolMarkerCanEdit. It writes project “memories” into a.serenadirectory. Nothing wrong with that, but it’s an editing agent with broad code access. Review its diffs, and gitignore its state. - Analytics are local. The
analyticsmodule counts tokens (tiktoken) and tallies tool usage for display in the dashboard. None of it is sent anywhere. - One real outbound call, and it’s benign. The optional web dashboard
(
127.0.0.1only) fetchesoraios-software.de/serena_news.jsonto show news; the other “POSTs” in the code are localhost calls to a desktop tray helper. No code, prompts, or usage data leave the machine. Disable the dashboard if you want zero outbound. - Boots clean.
serena --helpand the MCP entrypoint run without incident underuv.