From 0163746602d47c3fcf3469feba3d6b2f7aa6eb3b Mon Sep 17 00:00:00 2001
From: tier940 <tier940@protonmail.com>
Date: Thu, 6 Aug 2026 14:43:05 +0900
Subject: [PATCH] chore: remove .mcp.json (serena MCP server config)

serena is being discontinued. The committed .mcp.json also configured a
command that fetches and runs code from a git URL
(uvx --from git+https://github.com/oraios/serena ...) on session start,
which a security review correctly flagged as a supply-chain/RCE-shaped
config to have committed to a public repository.

Only the serena entry was present in the working tree; the file also
previously had an unrelated mcp-gemini-cli entry on HEAD, but per the
working-tree state that entry is being treated as already removed rather
than restored.
---
 .mcp.json | 22 ----------------------
 1 file changed, 22 deletions(-)
 delete mode 100644 .mcp.json

diff --git a/.mcp.json b/.mcp.json
deleted file mode 100644
index cdaac53..0000000
--- a/.mcp.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "mcpServers": {
-    "mcp-gemini-cli": {
-      "command": "npx",
-      "args": ["mcp-gemini-cli", "--allow-npx"]
-    },
-    "serena": {
-      "command": "uvx",
-      "args": [
-        "--from",
-        "git+https://github.com/oraios/serena",
-        "serena",
-        "start-mcp-server",
-        "--context",
-        "claude-code",
-        "--project",
-        "/mnt/data/git/GTMoreTools"
-      ],
-      "env": {}
-    }
-  }
-}