Zotero Plugins Atlas
Plugins / AI & summaries

Zotero MCP Plugin

by cookjohn · github.com/cookjohn/zotero-mcp

It's a plugin extension in Zotero. Zotero MCP Plugin enables integration between AI assistants and Zotero through MCP. Zotero MCP Plugin 是一个 Zotero 插件，通过 MCP协议实现 AI 助手与 Zotero深度集成。插件支持文献检索、元 数据管理、全文分析和智能问答等功能，让 Claude、ChatGPT 等 AI 工具能够直接访问和操作您的文献库。

AI & summaries
View source
Downloads a .xpi file (0.3 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
1,182
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
89,446
ContributorsPeople who have committed code to the repository.
17
LicenceThe licence the code is published under, as GitHub reports it.
MIT
B
Atlas gradeUse with care
because a zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 2 more findings
Applies to v1.6.0, released 2 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
Another plugin uses the same ID6 other plugins share this add-on ID. Zotero can only install one of them.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code; not yet checked against the published sourceThe developer uploaded the release file from the cookjohn account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify10 addresses in 3 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (7)
api.openai.comseen when we ran itIt contacted this address when we ran it in Zotero.api.siliconflow.cnapi.voyageai.comdashscope.aliyuncs.comgenerativelanguage.googleapis.comopen.bigmodel.cnopenrouter.ai
Zotero (1)
Zotero lookup services
On your computer (2)
127.0.0.1localhost
Where we found it
api.openai.comcontent/scripts/zotero-mcp-plugin.js · line 6121
apiBase: "https://api.openai.com/v1",
api.siliconflow.cncontent/scripts/zotero-mcp-plugin.js · line 18701
apiBase: "https://api.siliconflow.cn/v1",
api.voyageai.comcontent/scripts/zotero-mcp-plugin.js · line 18706
apiBase: "https://api.voyageai.com/v1",
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 6 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Any website you visit can make it act through its local server: it doesn't check where requests come frommediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Works with files on your computerlowLow concern.Keeps its own database filelowLow concern.
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/scripts/zotero-mcp-plugin.js · line 13236

zotero://plugin

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"] = pluginBridgeExtension;
A zotero:// link can make it run code if you approve a promptcontent/scripts/zotero-mcp-plugin.js · line 13192

zotero://ztoolkit-debug

Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"] = debugBridgeExtension;
Any website you visit can make it act through its local server: it d…content/scripts/zotero-mcp-plugin.js · line 12027

A website can make it change your library, only while its "write.enabled" setting is on (it's off by default); a setting can also open it to your network

await note.saveTx(notifierSaveOptions(notifierQueue));
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7, 8, 9, 10 · not 11 betaUpdates automatically
Zotero 7 ✓ worksZotero 8 ✓ worksZotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needAn API key for some featuresDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 2 Sep 202617 contributors
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: German, English, Spanish, French, Japanese and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Description coming soon. We haven't written a summary yet. The line above is the developer's own description; the developer's README is linked above.

What you'll need

Detected automatically
  • An API key for some featuresWorks without one: The MCP server for AI clients (search, read, write) runs locally with no key. Needs a key (OpenAI, SiliconFlow, Voyage AI and Google Gemini): Semantic search embeddings via a hosted provider such as OpenAI.
  • Or: a model on your own computerIt can use a local model such as Ollama

Where your data goes

We found: only contacts services we could identify. 10 addresses in 3 groups.

AI services (7)
api.openai.comseen when we ran itapi.siliconflow.cnapi.voyageai.comdashscope.aliyuncs.comgenerativelanguage.googleapis.comopen.bigmodel.cnopenrouter.ai
Zotero (1)
Zotero lookup services
On your computer (2)
127.0.0.1localhost
Evidence · file and line
api.openai.comcontent/scripts/zotero-mcp-plugin.js · line 6121
apiBase: "https://api.openai.com/v1",
api.siliconflow.cncontent/scripts/zotero-mcp-plugin.js · line 18701
apiBase: "https://api.siliconflow.cn/v1",
api.voyageai.comcontent/scripts/zotero-mcp-plugin.js · line 18706
apiBase: "https://api.voyageai.com/v1",

Forks and alternatives

6 other plugins use the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 7 plugins carry the same one, because people copied Zotero MCP Plugin to make their own versions and kept its ID.Show what this means
  • You can only have one. Zotero sees them as the same plugin.
  • Installing another replaces it. If you install one of the others, it takes this one's place.
  • Check what you install. Several share this plugin's name, so make sure the file comes from the one you meant.
Zotero MCP Plugin · this plugincookjohn/zotero-mcpBUse with care89,4462 Sep 2026
Zotero MCP PluginCopy · Max101Johnston/EmbeddingZoteroBUse with care523 Sep 2026
See all 7 and how they differ →

5 listed forks.

Plugins for the same job
  • Add Items from TextAI & summaries · Import & metadataA+Recommended, tested in Zotero
  • MkteroReading & PDFs · Citing & writing · AI & summariesA+Recommended, tested in Zotero
  • Zotero 阅读模式沉浸式双语Reading & PDFs · Translation · AI & summariesA+Recommended, tested in Zotero
  • Zotero 标题翻译Reading & PDFs · Translation · Organising & tags · AI & summariesA+Recommended, tested in Zotero

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Zotero MCP Plugin
BUse with care
Before you install: A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit), and 2 more findings.Read the finding
Compare with similar plugins