Plugins / Reading & PDFs

Zotero Agent

by psiQAQ · github.com/psiQAQ/zotero-agent

An AI agent framework for Zotero, enabling intelligent literature search, organization, annotation, and automated research workflows through MCP and JavaScript automation.

View source
Downloads a .xpi file (0.3 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
7
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
800
ContributorsPeople who have committed code to the repository.
2
LicenceThe licence the code is published under, as GitHub reports it.
MIT
B
Atlas gradeUse with care
because it contacts servers we couldn't identify: sci-hub.usualwant.com, www.pismin.com and 2 more, and 6 more findings
Applies to v2.2.2, released 5 Aug 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
Contacts a shadow libraryUsing a site such as Sci-Hub carries legal risk in some countries.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesContacts servers we couldn't identify: sci-hub.usualwant.com, www.pismin.com and 2 more33 addresses in 5 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Not identified (4)
sci-hub.usualwant.comwww.pismin.comwww.tesble.comwww.wellesu.com
AI services (7)
api.openai.comseen when we ran itIt contacted this address when we ran it in Zotero.api.siliconflow.cnapi.voyageai.comdashscope.aliyuncs.comgenerativelanguage.googleapis.comopen.bigmodel.cnopenrouter.ai
Scholarly services (19)
annas-archive.glannas-archive.seapi.clarivate.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.crossref.orgapi.openalex.orgapi.scite.aidoi.orgsci-hub.alsci-hub.boxsci-hub.eesci-hub.insci-hub.mksci-hub.redsci-hub.rensci-hub.rusci-hub.sesci-hub.stsci-hub.vgwww.crossref.org
Zotero (1)
Zotero lookup services
On your computer (2)
127.0.0.1localhost
Where we found it
sci-hub.usualwant.comcontent/scripts/zotero-agent.js · line 12262
{ url: "https://sci-hub.usualwant.com/{doi}" },
www.pismin.comcontent/scripts/zotero-agent.js · line 12261
{ url: "https://www.pismin.com/{doi}" },
www.tesble.comcontent/scripts/zotero-agent.js · line 12259
{ url: "https://www.tesble.com/{doi}" },
Powerful capabilitiesChanges Zotero settings that aren't its own, and 10 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Changes Zotero settings that aren't its ownmediumMedium concern: worth reading before you install.Installs other add-onsmediumMedium concern: worth reading before you install.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Runs a local server; a setting (off by default) opens it to your networkmediumMedium concern: worth reading before you install.Runs code other programs on this computer send itmediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Runs code it assembles while runninglowLow concern.Works with files on your computerlowLow concern.Keeps its own database filelowLow concern.
Where we found it
Changes Zotero settings that aren't its owncontent/scripts/zotero-agent.js · line 15400

Adds sources to Zotero's Find Available PDF, without asking, while its "write.enabled" setting is on (it's off by default); changes Zotero's proxy settings

Zotero.Prefs.set(PREF_KEY, JSON.stringify(next), true);
Installs other add-onscontent/scripts/zotero-agent.js · line 11375

From an address another program or an AI tool sends, without asking, only while its "eval.enabled" setting is on (it's off by default)

const install = await AddonManager.getInstallForURL(url);
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zotero-agent.js · line 17982

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/zotero-agent.js · line 17938

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Runs a local server; a setting (off by default) opens it to your net…content/scripts/zotero-agent.js · line 21977
this.serverSocket = Cc["@mozilla.org/network/server-socket;1"].createInstance(Ci.nsIServerSocket);
Runs code other programs on this computer send itcontent/scripts/zotero-agent.js · line 11260
const fn = new AsyncFunction(...names, code);
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10 · not 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 5 Aug 20262 contributors
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: German, English, Spanish, French, Japanese and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: The built-in MCP server for AI clients works with its own local token; Ollama embeddings need no key. Needs a key (Clarivate Web of Science, OpenAI, Google Gemini, Voyage AI, OpenRouter, SiliconFlow, Alibaba DashScope and Zhipu): Web of Science Starter search needs the user's own Clarivate key; cloud embedding providers (OpenAI, Google, etc.) need keys.
  • Or: a model on your own computerIt can use a local model such as Ollama

Where your data goes

We found: contacts servers we couldn't identify: sci-hub.usualwant.com, www.pismin.com and 2 more. 33 addresses in 5 groups.

Not identified (4)
sci-hub.usualwant.comwww.pismin.comwww.tesble.comwww.wellesu.com
AI services (7)
api.openai.comseen when we ran itapi.siliconflow.cnapi.voyageai.comdashscope.aliyuncs.comgenerativelanguage.googleapis.comopen.bigmodel.cnopenrouter.ai
Scholarly services (19)
annas-archive.glannas-archive.seapi.clarivate.comnamed in its codeapi.crossref.orgapi.openalex.orgapi.scite.aidoi.orgsci-hub.alsci-hub.boxsci-hub.eesci-hub.insci-hub.mksci-hub.redsci-hub.rensci-hub.rusci-hub.sesci-hub.stsci-hub.vgwww.crossref.org
Zotero (1)
Zotero lookup services
On your computer (2)
127.0.0.1localhost
Evidence · file and line
sci-hub.usualwant.comcontent/scripts/zotero-agent.js · line 12262
{ url: "https://sci-hub.usualwant.com/{doi}" },
www.pismin.comcontent/scripts/zotero-agent.js · line 12261
{ url: "https://www.pismin.com/{doi}" },
www.tesble.comcontent/scripts/zotero-agent.js · line 12259
{ url: "https://www.tesble.com/{doi}" },

Forks and alternatives

No forks listed.

Plugins for the same job
  • NoteroReading & PDFs · Files, sync & backupA+Recommended, tested in Zotero
  • ZoplicateOrganising & tagsA+Recommended, tested in Zotero
  • ZotMoovOrganising & tags · Files, sync & backupA+Recommended, tested in Zotero
  • Zutilo Utility for ZoteroOrganising & tagsA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotero Agent
BUse with care
Before you install: It contacts servers we couldn't identify: sci-hub.usualwant.com, www.pismin.com and 2 more, and 6 more findings.Read the finding
Compare with similar plugins