Zotero Plugins Atlas
Plugins / AI & summaries

Zotero AI Sidebar

by xuhan-rgb · github.com/xuhan-rgb/zotero-ai-sidebar

AI research sidebar for Zotero 7–10 with API and local browser-backed web chat modes.

AI & summaries
View source
Downloads a .xpi file (1.1 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
25
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
5,545
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
B
Atlas gradeUse with care
because it downloads a program checked against a fixed fingerprint, and runs it, and 4 more findings
Applies to v0.8.13, released 20 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
Another plugin uses the same IDOne other plugin shares this add-on ID. Zotero can only install one of them.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify17 addresses in 5 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (8)
api.anthropic.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.openai.comauth.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.chat.deepseek.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.chat.z.ainamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.chatglm.cnnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.chatgpt.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.www.kimi.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Scholarly services (4)
ar5iv.labs.arxiv.orgarxiv.orgdoi.orgnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.export.arxiv.org
Apps you connect (2)
dav.jianguoyun.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.mineru.netnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Code hosting (2)
github.comraw.githubusercontent.com
On your computer (1)
127.0.0.1
Where we found it
api.openai.comcontent/scripts/zotero-ai-sidebar.js · line 72691
return "https://api.openai.com/v1 (default)";
ar5iv.labs.arxiv.orgcontent/scripts/zotero-ai-sidebar.js · line 10275
var AR5IV_HTML_BASE = "https://ar5iv.labs.arxiv.org/html";
arxiv.orgcontent/scripts/zotero-ai-sidebar.js · line 10436
ind((link) => link.title === "pdf" || link.type === "application/pdf")?.href || `https://arxiv.org/pdf/${id}`;
Powerful capabilitiesDownloads a program checked against a fixed fingerprint, and runs it, and 7 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Downloads a program checked against a fixed fingerprint, and runs itmediumMedium concern: worth reading before you install.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Watches Zotero's network trafficmediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Works with files on your computerlowLow concern.Other programs on this computer can change your library through itlowLow concern.Lets programs on this computer connect through Zotero's built-in server
Where we found it
Downloads a program checked against a fixed fingerprint, and runs itcontent/scripts/zotero-ai-sidebar.js · line 6829

Checked against a fingerprint written into the plugin

const response = await fetch(url, { signal: controller.signal });
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zotero-ai-sidebar.js · line 2167

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/zotero-ai-sidebar.js · line 2123

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Watches Zotero's network trafficcontent/scripts/zotero-ai-sidebar.js · line 31003
service.registerChannelFilter(filter, 0);
Launches programs on your computercontent/scripts/zotero-ai-sidebar.js · line 216
const exec = Zotero?.Utilities?.Internal?.exec;
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10 · not 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 20 Sep 20261 contributor
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: only contacts services we could identify. 17 addresses in 5 groups.

AI services (8)
api.anthropic.comnamed in its codeapi.openai.comauth.openai.comnamed in its codechat.deepseek.comnamed in its codechat.z.ainamed in its codechatglm.cnnamed in its codechatgpt.comnamed in its codewww.kimi.comnamed in its code
Scholarly services (4)
ar5iv.labs.arxiv.orgarxiv.orgdoi.orgnamed in its codeexport.arxiv.org
Apps you connect (2)
dav.jianguoyun.comnamed in its codemineru.netnamed in its code
Code hosting (2)
github.comraw.githubusercontent.com
On your computer (1)
127.0.0.1
Evidence · file and line
api.openai.comcontent/scripts/zotero-ai-sidebar.js · line 72691
return "https://api.openai.com/v1 (default)";
ar5iv.labs.arxiv.orgcontent/scripts/zotero-ai-sidebar.js · line 10275
var AR5IV_HTML_BASE = "https://ar5iv.labs.arxiv.org/html";
arxiv.orgcontent/scripts/zotero-ai-sidebar.js · line 10436
ind((link) => link.title === "pdf" || link.type === "application/pdf")?.href || `https://arxiv.org/pdf/${id}`;

Forks and alternatives

1 other plugin uses the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 2 plugins carry the same one, because people copied Zotero AI Sidebar to make their own versions and kept its ID.Show what this means
  • You can only have one. Zotero sees them as the same plugin.
  • Installing another replaces it. If you install one of the others, it takes this one's place.
  • Check what you install. Several share this plugin's name, so make sure the file comes from the one you meant.
Zotero AI Sidebar · this pluginxuhan-rgb/zotero-ai-sidebarBUse with care5,54520 Sep 2026
See all 2 and how they differ →

2 listed forks.

Plugins for the same job
  • Add Items from TextAI & summaries · Import & metadataA+Recommended, tested in Zotero
  • MkteroReading & PDFs · Citing & writing · AI & summariesA+Recommended, tested in Zotero
  • Zotero 阅读模式沉浸式双语Reading & PDFs · Translation · AI & summariesA+Recommended, tested in Zotero
  • Zotero 标题翻译Reading & PDFs · Translation · Organising & tags · AI & summariesA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotero AI Sidebar
BUse with care
Before you install: It downloads a program checked against a fixed fingerprint, and runs it, and 4 more findings.Read the finding
Compare with similar plugins