Zotero Plugins Atlas
Plugins / Import & metadata

z-search

by Liozhang · github.com/Liozhang/z-search

学术搜索 · 网络搜索 · 仓库搜索 · 向量搜索 — 一站式 Zotero 搜索插件

Import & metadataAI & summaries
View source
Downloads a .xpi file (3.4 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
1
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
MIT
B
Atlas gradeUse with care
because it signs in using another app's identity, and 3 more findings
Applies to v1.0.2, released 25 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyMinified (compressed) code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryZotero will update it to version 1.1.0 from Liozhang/z-search on GitHub (rated: Review the details)
Where your data goesOnly contacts services we could identify75 addresses in 7 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (29)
Codex CLI (OpenAI)ai-gateway.vercel.shnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api-inference.modelscope.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.anthropic.comapi.baichuan-ai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.deepinfra.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.fireworks.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.githubcopilot.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.groq.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.lingyiwanwu.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.minimax.chatnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.mistral.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.moonshot.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comapi.orcarouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.perplexity.aiapi.siliconflow.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.stepfun.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.together.xyznamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.x.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.auth.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.chatgpt.comdashscope.aliyuncs.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.generativelanguage.googleapis.comopen.bigmodel.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.openrouter.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.router.huggingface.conamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.spark-api-open.xf-yun.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Translation (4)
api.cognitive.microsofttranslator.comtranslate.googleapis.comtranslation.googleapis.comwww.bing.com
Scholarly services (26)
api.archives-ouvertes.frapi.core.ac.ukapi.crossref.orgapi.dimensions.aiapi.lens.orgapi.openalex.orgapi.projectpq.aiapi.semanticscholar.orgapi.uspto.govchinarxiv.orgdoaj.orgdoi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.en.wikipedia.orgeutils.ncbi.nlm.nih.govexport.arxiv.orgopenalex.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.ops.epo.orgpatents.google.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.plus.kipris.or.krpubmed.ncbi.nlm.nih.govnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.worldcat.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.biorxiv.orgwww.ebi.ac.ukwww.medrxiv.orgwww.ncbi.nlm.nih.govzenodo.org
Apps you connect (11)
api.bing.microsoft.comapi.exa.aiapi.search.brave.comapi.tavily.comarchive.orggoogle.serper.devlite.duckduckgo.commineru.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.oauth2.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.serpapi.comwww.googleapis.com
Zotero (1)
Zotero lookup services
Code hosting (2)
adoptium.netapi.github.com
On your computer (2)
127.0.0.1localhostnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
api.anthropic.comcontent/scripts/zsearch.js · line 472
baseUrl: "https://api.anthropic.com",
api.openai.comcontent/scripts/zsearch.js · line 457
baseUrl: "https://api.openai.com/v1",
api.perplexity.aicontent/scripts/zsearch.js · line 604
baseUrl: "https://api.perplexity.ai",
Powerful capabilitiesSigns in using another app's identity, and 7 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Signs in using another app's identitymediumMedium concern: worth reading before you install.Keeps its own tables in Zotero's databasemediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Reuses a sign-in you saved in another programmediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Runs code it assembles while runninglowLow concern.Works with files on your computerlowLow concern.
Where we found it
Signs in using another app's identitycontent/scripts/zsearch.js · line 77358

Signs in as Codex CLI

CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
Keeps its own tables in Zotero's databasebootstrap.js · line 87

Tables: zsearch_bealls_journals, zsearch_bealls_metrics, zsearch_bealls_publishers, zsearch_cass_quartiles, zsearch_chat_messages_fts and 12 more

await Zotero.DB.queryAsync(`DROP TABLE IF EXISTS ${name}`);
Launches programs on your computercontent/scripts/zsearch.js · line 100072

Programs it names include sh

const proc0 = Cc2["@mozilla.org/process/util;1"].createInstance(
Reuses a sign-in you saved in another programcontent/scripts/zsearch.js · line 77336

Reuses the sign-in you saved in Codex CLI

const path = PathUtils.join(homeDir, ".codex", "auth.json");
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 9, 10 · not 11 betaUpdates automatically
Zotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 25 Sep 20262 contributors
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: Academic search, DuckDuckGo web search, Google free translate endpoint, local embeddings. Needs a key (Brave Search, Tavily, Exa, Semantic Scholar, DeepL and OpenAI): Extra web-search providers (Brave, Tavily, Exa, etc.), some scholarly APIs, paid translation engines, and cloud AI providers.
  • Or: a model on your own computerIt can use a local model such as Ollama

Where your data goes

We found: only contacts services we could identify. 75 addresses in 7 groups.

AI services (29)
Codex CLI (OpenAI)ai-gateway.vercel.shnamed in its codeapi-inference.modelscope.cnnamed in its codeapi.anthropic.comapi.baichuan-ai.comnamed in its codeapi.deepinfra.comnamed in its codeapi.deepseek.comnamed in its codeapi.fireworks.ainamed in its codeapi.githubcopilot.comnamed in its codeapi.groq.comnamed in its codeapi.lingyiwanwu.comnamed in its codeapi.minimax.chatnamed in its codeapi.mistral.ainamed in its codeapi.moonshot.cnnamed in its codeapi.openai.comapi.orcarouter.ainamed in its codeapi.perplexity.aiapi.siliconflow.cnnamed in its codeapi.stepfun.comnamed in its codeapi.together.xyznamed in its codeapi.x.ainamed in its codeauth.openai.comnamed in its codechatgpt.comdashscope.aliyuncs.comnamed in its codegenerativelanguage.googleapis.comopen.bigmodel.cnnamed in its codeopenrouter.ainamed in its coderouter.huggingface.conamed in its codespark-api-open.xf-yun.comnamed in its code
Translation (4)
api.cognitive.microsofttranslator.comtranslate.googleapis.comtranslation.googleapis.comwww.bing.com
Scholarly services (26)
api.archives-ouvertes.frapi.core.ac.ukapi.crossref.orgapi.dimensions.aiapi.lens.orgapi.openalex.orgapi.projectpq.aiapi.semanticscholar.orgapi.uspto.govchinarxiv.orgdoaj.orgdoi.orgnamed in its codeen.wikipedia.orgeutils.ncbi.nlm.nih.govexport.arxiv.orgopenalex.orgnamed in its codeops.epo.orgpatents.google.comnamed in its codeplus.kipris.or.krpubmed.ncbi.nlm.nih.govnamed in its codeworldcat.orgnamed in its codewww.biorxiv.orgwww.ebi.ac.ukwww.medrxiv.orgwww.ncbi.nlm.nih.govzenodo.org
Apps you connect (11)
api.bing.microsoft.comapi.exa.aiapi.search.brave.comapi.tavily.comarchive.orggoogle.serper.devlite.duckduckgo.commineru.netnamed in its codeoauth2.googleapis.comnamed in its codeserpapi.comwww.googleapis.com
Zotero (1)
Zotero lookup services
Code hosting (2)
adoptium.netapi.github.com
On your computer (2)
127.0.0.1localhostnamed in its code
Evidence · file and line
api.anthropic.comcontent/scripts/zsearch.js · line 472
baseUrl: "https://api.anthropic.com",
api.openai.comcontent/scripts/zsearch.js · line 457
baseUrl: "https://api.openai.com/v1",
api.perplexity.aicontent/scripts/zsearch.js · line 604
baseUrl: "https://api.perplexity.ai",

Forks and alternatives

No forks listed.

Plugins for the same job
  • Google Scholar Citation CountCiting & writing · Import & metadataA+Recommended, tested in Zotero
  • DOI FixImport & metadataA+Recommended, tested in Zotero
  • Add Items from TextAI & summaries · Import & metadataA+Recommended, tested in Zotero
  • MkteroReading & PDFs · Citing & writing · AI & summariesA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install z-search
BUse with care
Before you install: It signs in using another app's identity, and 3 more findings.Read the finding
Compare with similar plugins